CVE-2012-1106

The C handler plug-in in Automatic Bug Reporting Tool ABRT, possibly 2.0.8 and earlier, does not properly set the group GID permissions on core dump files for setuid programs when the sysctl fs.suiddumpable option is set to 2, which allows local users to obtain sensitive information...

CVE-2012-1106: Undefined Security Weakness

The C handler plug-in in Automatic Bug Reporting Tool ABRT, possibly 2.0.8 and earlier, does not properly set the group GID permissions on core dump files for setuid programs when the sysctl fs.suiddumpable option is set to 2, which allows local users to obtain sensitive information...

PT-2012-3084

Name of the Vulnerable Software and Affected Versions ABRT versions 2.0.8 and earlier Description The issue is related to the C handler plug-in in ABRT, which does not properly set group permissions on core dump files for setuid programs when the sysctl fs.suid dumpable option is set to 2. This...

Microsoft Wordpad 5.1 - .doc Null Pointer Dereference

Microsoft Wordpad 5.1 - .doc Null Pointer Dereference Microsoft Wordpad 5.1 .doc Null Pointer Dereference Vulnerability Found by condis Tested on Windows XP SP 3 Proffesional PL MS Wordpad 5.1 Compilation 2600.xpsp.080413-2111 SP 3 This isn't bug from CWE 2009-0259 $ Binnary diff of template file...

postgresql: SQL injection due unsanitized newline characters in object names

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

CVE-2012-0376: Undefined Security Weakness

The voice-sipstack component in Cisco Unified Communications Manager CUCM 8.5 allows remote attackers to cause a denial of service core dump via vectors involving SIP messages that arrive after an upgrade, aka Bug ID CSCtj87367...

PT-2012-2531

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager CUCM version 8.5 Description The issue allows remote attackers to cause a denial of service, resulting in a core dump, via vectors involving SIP messages that arrive after an upgrade. Recommendations For...

Microsoft Visual Studio连接器整数溢出漏洞

Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 在基于COFF符号数量的基础上分配内存时连接器link.exe存在整数溢出，构建特制的PE文件，可触发基于堆的缓冲区溢出。 要成功利用漏洞需要诱使用户通过"dumpbin"或"link /dump"工具处理特制文件。 0 Microsoft Visual Studio 2008 Shell Integrated Mode - ENU 9.0.30729 Microsoft Visual Studio 2008 SP1 Microsoft Visual Studio 2008 9.00.21022.08...

wireshark security update

CentOS Errata and Security Advisory CESA-2012:0509 Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS ba...

Seditio 165 Cross Site Request Forgery / Backup Disclosure

============================================= Vulnerable Software: Seditio v165 Downloaded from: http://seditio-eklenti.com/datas/users/1-seditio.165.rar This version is under development of Kaan $ md5sum 1-seditio.165.rar 2eebc8d80f7fcd4e9a0d0659ef193488 1-seditio.165.rar...

seditio165_CSRF_and_world_readble_db_dumpissuses

============================================= Vulnerable Software: Seditio v165 Downloaded from: http://seditio-eklenti.com/datas/users/1-seditio.165.rar This version is under development of Kaan $ md5sum 1-seditio.165.rar 2eebc8d80f7fcd4e9a0d0659ef193488 1-seditio.165.rar...

eToro Vulnerable to Database Dump

eToro Vulnerable to Database Dump Security Experts at Zsecure.net discover a serious Vulnerability in eToro,which is a financial trading company based in Cyprus and one of the top ranked Forex Trading Service Provider Worldwide. It provides personal online financial services in forex, commodities...

Google Talk - 'gtalk://' Deprecated URI Handler Injection

Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability tested against: Internet Explorer 8 Microsoft Windows all versions download url of 1.0.0.104: http://www.google.com/talk/install.html download urls of 1.0.0.105: http://www.google.com/talk/intl/it/...

Google Talk - gtalk: Deprecated URI Handler Injection

Google Talk - gtalk: Deprecated URI Handler Injection Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability tested against: Internet Explorer 8 Microsoft Windows all versions download url of 1.0.0.104: http://www.google.com/talk/install.html download urls of...

Google Talk gtalk:// Deprecated Uri Handler Parameter Injection

Exploit for windows platform in category remote exploits Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability tested against: Internet Explorer 8 Microsoft Windows all versions download url of 1.0.0.104: http://www.google.com/talk/install.html download urls of...

Oracle DataDirect ODBC drivers arsqls24. dll buffer overflow vulnerability-vulnerability warning-the black bar safety net

? php / Oracle DataDirect ODBC drivers arsqls24. dll buffer overflow vulnerability Overflow PoC . oce by rgod This poc will create a suntzu. the oce file which should work against Hyperion Interactive Reporting Studio which is delivered with the Oracle Hyperion Suite. When clicked a login box...

Adobe Flash Player .mp4 'cprt' Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player .mp4 'cprt'...

BigDump Importer v0.32b remote file upload

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : BigDump Importer v0.32b RFU Date : 05-03-2012 Author : TeaM MosTa Version : ALL Dork :...

Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords

Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords Apple supplier Foxconn has reportedly been hacked, exposing the usernames and passwords of the company's clients and employees. Hacker group SwaggSec just released a dump of Foxconn internal information, including a...

CVE-2011-5066

The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus SIB dump operation involving the First Failure Data Capture FFDC introspection code, which allows local users to...