CVE-2010-4687: Improper Input Validation

STCAPP aka the SCCP telephony control application on Cisco IOS before 15.01XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service port hang by simultaneously ending two calls that were controlled by CallManager Express CME, aka Bug...

CVE-2009-5040: Undefined Security Weakness

CallManager Express CME on Cisco IOS before 15.01XA allows remote authenticated users to cause a denial of service device crash by using an extension mobility EM phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555...

PT-2011-1641

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA1 Description The issue is related to the handling of SIP TRUNK traffic with rate bursts and a peculiar request size in CallManager Express CME on Cisco IOS. This allows remote attackers to cause a denial of...

PT-2011-1642

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA1 Description The issue is related to the STCAPP application on Cisco IOS, which does not properly handle multiple calls to a shared line. This allows remote attackers to cause a denial of service by...

CVE-2009-2189

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of 1 Router Advertisement and 2 Neighbor Discovery packets, which allows remote attackers to cause a denial of service resource...

Command injection

The Application-Level Gateway ALG on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by...

CVE-2009-2189

The CVE-2009-2189 affects Apple Time Capsule , AirPort Extreme Base Station , and AirPort Express Base Station with firmware before 7.5.2. The ICMPv6 implementation does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, enabling a remote attacker on the same netwo...

PT-2010-3437

Name of the Vulnerable Software and Affected Versions Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station versions prior to 7.5.2 Description The issue is related to an unspecified vulnerability in the network bridge functionality, which allows remote attackers to...

PT-2010-1264

Name of the Vulnerable Software and Affected Versions Apple AirPort Express Base Station versions prior to 7.5.2 Apple AirPort Extreme Base Station versions prior to 7.5.2 Apple Time Capsule versions prior to 7.5.2 Description The issue concerns the ICMPv6 implementation, which does not limit the...

PT-2010-1864

Name of the Vulnerable Software and Affected Versions Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station versions prior to 7.5.2 Description The issue allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write acce...

CVE-2009-2189: Undefined Security Weakness

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of 1 Router Advertisement and 2 Neighbor Discovery packets, which allows remote attackers to cause a denial of service resource...

CVE-2010-0039: Undefined Security Weakness

The Application-Level Gateway ALG on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by...

CVE-2010-1804: Undefined Security Weakness

Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service networking outage via a crafted DHCP reply...

Google and Godaddy Head Coalition Against Rogue Pharmacies

Herbal Viagra peddlers beware: Google and GoDaddy are coordinating the establishment of a non-profit organization dedicated to curbing the spread of illegal online pharmaceutical companies. The two firms plan to share information and work together to educate consumers about the dangers of buying...

AIX 610003 : U838945

The remote host is missing AIX PTF U838945 which is related to the security of the package devices.pciex.2514310025140100.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

Microsoft Outlook Express 6 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================= Microsoft Outlook Express 6 DLL Hijacking Exploit ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

MS10-070 ASP.NET Padding Oracle File Download

!/usr/bin/ruby -w aspxpochotextattack.rb Copyright c 2010 AmpliaSECURITY. All rights reserved http://www.ampliasecurity.com Agustin Azubel - [email protected] MS10-070 ASPX proof of concept Decrypt data using Vaudenay's cbc-padding-oracle-side-channel Encrypt data using Rizzo-Duong CBC-R...

Ulead Photo Express 6.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ============================================= Ulead Photo Express 6.0 DLL Hijacking Exploit ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...

HP Data Protector Express DtbClsLogin function buffer overflow

Added: 10/07/2010 CVE: CVE-2010-3007 BID: 43105 OSVDB: 67973 Background HP Data Protector Express is a backup and recovery solution for single machines and small networks. Problem A buffer overflow vulnerability in dpwindtb.dll in the DtbClsLogin function allows remote attackers to execute...