Sun Java SE November 2009 Multiple Security Vulnerabilities

Description Sun has released updates to address multiple security vulnerabilities in Java SE. Successful exploits may allow attackers to bypass certain security restrictions, run untrusted applets with elevated privileges, execute arbitrary code, and cause denial-of-service conditions. Other...

Sun Java SE November 2009 - Multiple Vulnerabilities (2)

Sun Java SE November 2009 - Multiple Vulnerabilities 2 source: https://www.securityfocus.com/bid/36881/info Sun has released updates to address multiple security vulnerabilities in Java SE. Successful exploits may allow attackers to bypass certain security restrictions, run untrusted applets with...

OpenDocMan Multiple XSS and SQL Injection Vulnerabilities

OpenDocMan is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Bftpd Unspecified Remote Denial of Service Vulnerability

Bftpd is prone to an unspecified remote denial-of-service vulnerability. Successful exploits will cause the affected application to crash, denying service to legitimate users. Versions prior to Bftpd 2.4 are vulnerable. OpenVAS Vulnerability Test $Id: bftpd36820.nasl 7573 2017-10-26 09:18:50Z...

Pegasus Mail Client 4.51 PoC BoF

Exploit for unknown platform in category remote exploits ================================ Pegasus Mail Client 4.51 PoC BoF ================================ Title: Pegasus Mail Client 4.51 PoC BoF CVE-ID: OSVDB-ID: Author: Francis Provencher Published: 2009-10-23 Verified: yes view source print?...

CVE-2009-4535

creationtimestamp| type| source ---|---|--- 2009-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9897 2010-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12309...

Pegasus Mail Client 4.51 - Remote Buffer Overflow

Pegasus Mail Client 4.51 - Remote Buffer Overflow Application: Pegasus Mail Client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code Only DoS =============== 1 Introductio...

PYSEC-2009-18

The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings...

PYSEC-2009-18

The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings...

PT-2009-1042 · Linux +2 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31-git11 Red Hat Enterprise Linux kernel versions 2.4.21 Description: The issue concerns multiple vulnerabilities in the Linux kernel and Red Hat Enterprise Linux kernel, which can lead to a disruption of...

Gumblar: Back and Better than Ever

One of the great things about the Internet is that things can live on indefinitely. Unfortunately, that long life expectancy applies to malware, as well. The Gumblar botnet, which has been active for several months now but had quieted down somewhat, is making a comeback in a big way. IBM ISS’s...

CVE-2009-3789

creationtimestamp| type| source ---|---|--- 2009-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9903 2009-10-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33304 2009-10-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33295 2009-10-21...

VUPEN Security - Adobe Acrobat and Reader U3D Filter Code Execution Vulnerabilities

VUPEN Vulnerability Research - Adobe Acrobat and Reader U3D Filter Code Execution Vulnerabilities I. BACKGROUND --------------------- Adobe Acrobat is a family of computer programs developed by Adobe Systems, designed to view, create, manipulate and manage files in Adobe's Portable Document Forma...

CVE-2009-4554

creationtimestamp| type| source ---|---|--- 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9856 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33290 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33291...

CVE-2009-3730

creationtimestamp| type| source ---|---|--- 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33292 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33293 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10094...

Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. Application: Snitz Forums 2000 Version affected: 3.4.07 Website: http://forum.snitz.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: Multiple Cross-Site Scripting PERMANENT XSS If sound tag is allowed:...

Adobe Warns: Unpatched PDF Vulnerability Under Attack

Adobe has confirmed a critical, unpatched vulnerability in its PDF Reader/Acrobat software is being exploited by malicious attackers. The vulnerability affects Adobe Reader and Acrobat 9.1.3 and earlier versions on Windows, Macintosh and UNIX. Adobe described the in-the wild attacks as limited an...

QuickCart XSS / XSRF / LFI

DISCOVERED: Paweł 'kl3ryk' Łaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then throw an exception. example:...

CVE-2009-4745

creationtimestamp| type| source ---|---|--- 2009-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10006 2009-10-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33282...

PHPGenealogie 2.0 'CoupleDB.php' RFI Vulnerability

PHPGenealogie is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...