ACROS Security: Remote Binary Planting in Apple Safari for Windows (ASPR #2010-09-08-1)

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-09-08-1 ------------------------------------------------------------------------- ASPR 2010-09-08-1: Remote Binary Planting in Apple Safari for Windows...

Lokomedia CMS (sukaCMS) Local File Disclosure Vulnerability

Exploit for php platform in category web applications =========================================================== Lokomedia CMS sukaCMS Local File Disclosure Vulnerability =========================================================== Software Link: http://bukulokomedia.com Version: 2.0 Tested on: a...

iDefense Security Advisory 12.08.09: Microsoft Windows Indeo32 Codec Parsing Heap Corruption Vulnerability

iDefense Security Advisory 12.08.09 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2009 I. BACKGROUND Indeo Video is a video codec developed by Intel and included in Microsoft Windows. For more information about Indeo codec, please the visit following website:...

CVE-2008-3986

Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors...

CVE-2008-3987

Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors...

CVE-2008-3986

CVE-2008-3986 affects the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2. Local users can impact confidentiality via unknown vectors. The connected Oracle CPU Oct 2008 advisory lists this as a patched vulnerability; apply the CPUOct2008 fixes to mitiga...

CVE-2008-3986

Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors...

CVE-2008-3987

Technical details about CVE-2008-3987 are not publicly provided in the supplied documents; references note an unspecified local vulnerability in Oracle Discoverer Desktop 10.1.2.3. Monitor for updates.

CVE-2008-3987: Undefined Security Weakness

Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors...

CVE-2008-3986: Undefined Security Weakness

Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors...

iDefense Security Advisory 07.28.08: Hewlett-Packard OVIS Probe Builder Arbitrary Process Termination Vulnerability

iDefense Security Advisory 07.28.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2008 I. BACKGROUND Hewlett-Packard's Internet Services provides end-user emulation of major business applications and a single integrated view of the Internet infrastructure. For more information,...

CMS WebManager-Pro Multiple Remote SQL Injection Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/...

[Full-disclosure] iDefense Security Advisory 02.04.08: Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability

iDefense Security Advisory 02.04.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 04, 2008 I. BACKGROUND HP Network Node Manager is a network mapping and management application that allows administrators to monitor and control their networks. The ovtopmd process listens, in a default...

iDefense Security Advisory 08.30.07: Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities

Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities iDefense Security Advisory 08.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 30, 2007 I. BACKGROUND Yahoo! Messenger is a instant messaging application that allows users to chat online, share...

PHPNS 1.1 (shownews.php id) Remote SQL Injection Vulnerability

No description provided by source. PHPNS SQL Injection Software: phpns current version v1.1 Vendor link: http://phpns.com Attack: SQL Injection Original advisory: http://14house.blogspot.com/2007/08/phpns-sql-injection.html Discovered by: David Sopas Ferreira a.k.a SmOk3 smok3f00 at gmail.com SQL...

zenturi-overflow.txt

------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory: http://secunia.com/advisories/25473/ Will Dormann, CERT/CC, is credited with the...

CVE-2007-2120

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01...

Command injection

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01...