PHP 5.2.0 (Windows x86) - PHP_win32sti Local Buffer Overflow

PHP 5.2.0 Windows x86 - PHPwin32sti Local Buffer Overflow // x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // x "Sangre, sonando, de rabia naci.. Who do you trust?" // //...

PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)

Exploit for unknown platform in category dos / poc ============================================================= PHP // x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // x "Sangre,...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 64-bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of th...

IPv6 oops triggerable by any user

net/ipv6/tcpipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6flsocklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service OOPS or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to...

Debian DSA-1304-1 : kernel-source-2.6.8 - several vulnerabilities

CVE-2006-6060 CVE-2006-6106 CVE-2006-6535 CVE-2007-0958 CVE-2007-1357 CVE-2007-1592 Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. This update also fixes a regression in the smbfs subsystem...

Microsoft Visio文档封装远程代码执行漏洞（MS07-030）

Microsoft Visio是Office套件中用于绘制流程图的软件。 Microsoft Visio解析Visio文件格式中的打包对象的方式存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 攻击者可能通过创建恶意Visio（.VSD、.VSS或.VST）文件诱使用户打开处理来利用此漏洞，如果用户访问恶意网站或打开电子邮件中包含的特制Visio附件，则这些文件可能允许远程执行指令。 Microsoft Visio 2003 Microsoft Visio 2002 临时解决方法： 不要打开或保存从不受信任来源或从受信任来源意外收到的Microsoft Visio文件。...

CentOS 3 : kernel (CESA-2007:0436)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the ninth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

IPv6 oops triggerable by any user

net/ipv6/tcpipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6flsocklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service OOPS or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to...

Cross site scripting

Cross-site scripting XSS vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-2811

Cross-site scripting XSS vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-2811

Cross-site scripting XSS vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-2811

The CVE-2007-2811 issue affects OSK Advance-Flow (and related forms) prior to version 4.42, where an XSS vulnerability exists in the application forms. The vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors, potentially executing code in a user’s browser...

CVE-2007-2811: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#92832583 Advance-Flow cross-site scripting vulnerability

Advance-Flow provided by OSK Co. LTD contains a cross-site scripting vulnerability, as it does not properly handle output data. Some application forms are not affected by this vulnerability and some are, depending on the contents of the application forms. Impact An arbitrary script may be execute...

IPv6 oops triggerable by any user

net/ipv6/tcpipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6flsocklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service OOPS or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to...

3proxy 0.5.3g proxy.c logurl() Remote Overflow Exploit (exec-shield)

No description provided by source. / Fedora Core 5,6 exec-shield based 3proxy HTTP Proxy 3proxy-0.5.3g.tgz remote overflow root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

Debian DSA-1286-1 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-0005 Daniel Roethlisberger discovered two buff...

DSA-1286-1 linux-2.6

Bulletin has no description...

IPv6 oops triggerable by any user

net/ipv6/tcpipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6flsocklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service OOPS or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to...

CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO87569)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple vulnerabilities in the Mediasrv RPC service. First, the service does not properly sanitize a string given as an argument to different RPC functions prior to calling the function...