CVE-2010-1797

Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...

wdb-version NSE Script

Detects vulnerabilities and gathers information such as version numbers and hardware support from VxWorks Wind DeBug agents. Wind DeBug is a SunRPC-type service that is enabled by default on many devices that use the popular VxWorks real-time embedded operating system. H.D. Moore of Metasploit ha...

CVE-2010-1797

Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...

Microsoft Windows Kernel Access Control Lists Local Denial of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to cause the system to become unresponsive and automatically restart, resulting in a denial-of-service condition. Technologies Affected Avaya Aur...

Dlink WBR-2310 Embedded Web Server 1.04 Denial Of Service

DCA-00014 Software - Dlink WBR-2310 Embedded Web Server Vendor Product Description - The D-Link RangeBooster G™ WBR-2310 with enhanced 108 features the industry’s first default 108Mbps “Dynamic Mode” that allows clients to always operate at the highest possible speeds while automatically...

freetype: buffer overflow vulnerability

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment...

VxWorks OS Is Open to Attack

Renowned researcher HD Moore next week will reveal how a misconfiguration by developers using the VxWorks operating system found in many embedded systems has left a trail of vulnerable products across various vendors’ products. Read the full article. Dark Reading...

openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)

w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 12 Update: python-mako-0.3.4-1.fc12

Mako is a template library written in Python. It provides a familiar, non-X ML syntax which compiles into Python modules for maximum performance. Mako's syntax and API borrows from the best ideas of many others, including Django templates, Cheetah, Myghty, and Genshi. Conceptually, Mako is an...

[SECURITY] Fedora 13 Update: python-mako-0.3.4-1.fc13

Mako is a template library written in Python. It provides a familiar, non-X ML syntax which compiles into Python modules for maximum performance. Mako's syntax and API borrows from the best ideas of many others, including Django templates, Cheetah, Myghty, and Genshi. Conceptually, Mako is an...

Adobe PDF Embedded EXE Social Engineering

This module embeds a Metasploit payload into an existing PDF file. The resulting PDF can be sent to a target as part of a social engineering attack. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModu...

PDF Files Containing Embedded Adobe Flash Movies (CVE-2010-1297; CVE-2010-2168; CVE-2010-2201)

Multiple vulnerabilities have been reported in Adobe Reader and Acrobat when handling PDF files that contain embedded Adobe Flash movies. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful exploitation will create a denial of service condition, causing the...

HPSBPI02656 SSRT090262 rev.2 - Certain HP Photosmart Printers, Remote Unauthorized Access, Cross Site Scripting (XSS)

Potential Security Impact Remote unauthorized access to data, cross site scripting XSS VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP Photosmart printers. These vulnerabilities could be exploited remotely for cross site scripting XSS or to gain...

Microsoft Office multiple security vulnerabilities

Code execution via embedded COM objects, multiple Excel memory corruptions...

GoAhead Webserver 2.18 Source Code Disclosure

Exploit Title: GoAheaad Webserver Source Code Disclosure Vulnerability Date: 5-28-10 Author: Sil3ntDre4m Software Link: http://data.goahead.com/Software/Webserver/2.1.8/webs218.zip Version: 2.18 and earlier Tested on: Windows Affects: Windows platform only Code :...

Microsoft Windows Embedded OpenType Font Engine LZCOMP Overflow (MS10-001; CVE-2010-0018)

Embedded OpenType EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploit these vulnerabilities via a specially crafted EOT file. Successful exploitation may allow execution of arbitrary code on a vulnerable system. An integer overflow vulnerability has...

GoAheaad WebServer - Source Code Disclosure

GoAheaad WebServer - Source Code Disclosure Exploit Title: GoAheaad Webserver Source Code Disclosure Vulnerability Date: 5-28-10 Author: Sil3ntDre4m Software Link: http://data.goahead.com/Software/Webserver/2.1.8/webs218.zip Version: 2.18 and earlier Tested on: Windows Affects: Windows platform...

GoAheaad Webserver Source Code Disclosure Vulnerability

Exploit for windows platform in category remote exploits ======================================================= GoAheaad Webserver Source Code Disclosure Vulnerability ======================================================= Exploit Title: GoAheaad Webserver Source Code Disclosure Vulnerability...

CVE-2010-0987

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file...

Heap overflow

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file...