strongSwan Certificate and Identification Payload Parsing Buffer Overflow (CVE-2010-2628)

strongSwan is an open-source implementation of IPsec for Linux platforms including Debian, Ubuntu, FreeBSD and Mac OS X. It is a scalable VPN solution that supports the Internet Key Exchange IKE protocol version 1 as well as IKEv2. A remote code execution vulnerability has been reported in...

Ears Are The New Target in Biometric Security

Researchers in the School of Electronics and Computer Science of the University of Southampton have come up with a means for identifying ears with a success rate of 99.6%. Read the full article. MIT Technology Review...

SyndeoCMS Detection (HTTP)

HTTP based detection of SyndeoCMS. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100783";...

CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

CVE-2010-3103

Directory traversal vulnerability in FTPGetter Team FTPGetter 3.51.0.05, and probably earlier versions, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-2497

Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2239

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors...

SWFTools Version Detection

This script finds the installed SWFTools version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbswftoolsdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ SWFTools Version Detection Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net Th...

CVE-2007-3336

creationtimestamp| type| source ---|---|--- 2010-08-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14646...

SimpNews Version Detection

This script finds the running version of SimpNews. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Web Sever 7.0 u7 Remote Exploit

Exploit for windows platform in category remote exploits ======================================== Sun Java Web Sever 7.0 u7 Remote Exploit ======================================== / Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This...

CVE-2010-2074

istream.c in w3m 0.5.2 and possibly other versions, when sslverifyserver is enabled, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary S...

CVE-2007-2919

creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16601 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ebookflipviewerfviewerloading.rb 2025-02-06...

REvolution 10.02 - Cross-Site Request Forgery

REvolution 10.02 - Cross-Site Request Forgery Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability...

Kaspersky Antivirus Code Injection

Hello Bugtraq. I write to notify a vulnerability in Kaspersky Antivirus that allows the code injection in the process that is executed in user's context, allowing: 1. The modification, creation and elimination of the values and keys in the Registration with respect to the configuration of the...

CVE-2002-0649

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16393 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/ms02039slammer.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2006-2212

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16702 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/samiftpduser.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2004-0541

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16847 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/proxy/squidntlmauthenticate.rb 2025-02-06 03:13:38+00:00|...

CVE-2010-0825

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

CVE-2010-0488

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Information Disclosure Vulnerability."...