DEBIAN-CVE-2012-5573

The connectionedgeprocessrelaycell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service memory consumption or excessive cell reception rate or bypass intended flow-control...

CVE-2012-5573

The connectionedgeprocessrelaycell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service memory consumption or excessive cell reception rate or bypass intended flow-control...

CVE-2012-5573

The connectionedgeprocessrelaycell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service memory consumption or excessive cell reception rate or bypass intended flow-control...

CVE-2012-5573

The connectionedgeprocessrelaycell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service memory consumption or excessive cell reception rate or bypass intended flow-control...

UBUNTU-CVE-2012-5573

The connectionedgeprocessrelaycell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service memory consumption or excessive cell reception rate or bypass intended flow-control...

CVE-2012-5573

The CVE-2012-5573 issue affects Tor before 0.2.3.25, where SENDME cell handling could trigger memory exhaustion or excessive cell reception, enabling DoS or flow-control bypass. Affected component: core Tor relay/OR handling. Impact per sources: potential Denial of Service on entry nodes. Remedia...

CVE-2012-5573

The connectionedgeprocessrelaycell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service memory consumption or excessive cell reception rate or bypass intended flow-control...

PT-2013-1807

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.3.25 Description The issue allows remote attackers to potentially cause a denial of service or bypass flow-control restrictions. This could lead to memory consumption or an excessive cell reception rate via a RELAY...

Juniper Junos BGP UPDATE DoS (PSN-2012-10-733)

According to its self-reported version number, the remote Junos device could crash when processing a BGP UPDATE message containing a specially crafted flow specification NLRI. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20120710)

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fix : - The fix for CVE-2011-1083 introduced a flaw in the way the Linux kernel's Event Poll epoll subsystem handled resource clean up when an ELOOP error code was returned. A local, unprivileged user...

CentOS 5 : kernel (CESA-2012:1061)

Updated kernel packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

WordPress Content Flow 3D Plugin 1.0.0 - Arbitrary File Upload

Content Flow 3D plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible...

WordPress Plugin Content Flow 3D 1.0.0 - Arbitrary File Upload

WordPress Plugin Content Flow 3D 1.0.0 - Arbitrary File Upload Exploit Title: Wordpress content-flow3d Arbitrary File Upload Google Dork: inurl:plugins/content-flow3d/ Date: 10June2012 Exploit Author: g11tch Vendor Homepage: http://wordpress.org/extend/plugins/content-flow3d/ Software Link:...

WordPress Plugin Content Flow 3D 1.0.0 - Arbitrary File Upload

Exploit Title: Wordpress content-flow3d Arbitrary File Upload Google Dork: inurl:plugins/content-flow3d/ Date: 10June2012 Exploit Author: g11tch Vendor Homepage: http://wordpress.org/extend/plugins/content-flow3d/ Software Link: downloads.wordpress.org/plugin/content-flow3d.zip Version: 1.0.0...

HITB2011KUL - Post Memory Corruption Analysis

Document Title: =============== HITB2011KUL - Post Memory Corruption Analysis References: =========== Download: http://www.vulnerability-lab.com/resources/videos/398.wmv View: http://www.youtube.com/watch?v=kOgarD9KCbg Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID:...

HITB2011KUL - Post Memory Corruption Analysis

Document Title: =============== HITB2011KUL - Post Memory Corruption Analysis References: =========== Download: http://www.vulnerability-lab.com/resources/videos/398.wmv View: http://www.youtube.com/watch?v=kOgarD9KCbg Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID:...

Design/Logic Flaw

The Ming Blacklist Free vc.software.blacklist application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack."...

CVE-2011-4705

CVE-2011-4705 affects the Ming Blacklist Free Android app, versions 1.8.1 and 1.9.2.1. The issue is an inadequate protection of data, enabling remote attackers to read or modify the app’s blacklists and a contacts list through a crafted application that triggers a “data-flow attack.” The availabl...

PT-2012-1949

Name of the Vulnerable Software and Affected Versions The Ming Blacklist Free vc.software.blacklist application versions 1.8.1 and 1.9.2.1 Description The issue allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack." Th...

CVE-2011-4705: Undefined Security Weakness

The Ming Blacklist Free vc.software.blacklist application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack."...