PT-2012-1796

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions prior to 9.0.0.11291 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory due to an untrusted search path vulnerability...

CVE-2011-4053: Undefined Security Weakness

Untrusted search path vulnerability in 7-Technologies 7T Interactive Graphical SCADA System IGSS before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

[SECURITY] Fedora 15 Update: plib-1.8.5-5.fc15

This is a set of OpenSource LGPL libraries that will permit programmers to write games and other realtime interactive applications that are 100% portable across a wide range of hardware and operating systems. Here is what you need - it's all free and available with LGPL'ed source code on the web...

PT-2011-4974

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11355 and earlier Description The issue is related to multiple buffer overflows that can be triggered by remote attackers sending crafted packets to specific TCP ports, potential...

CVE-2011-4537: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

CVE-2011-4050: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401...

PT-2011-4829

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11200 Description The issue is related to a buffer overflow that can be triggered by remote attackers sending a crafted packet to TCP port 12401, resulting in a denial of service...

Telnetd encrypt_keyid: Remote Root function pointer overwrite

Exploit for linux platform in category remote exploits / telnetd-encryptkeyid.c Mon Dec 26 20:37:05 CET 2011 Copyright 2011 Jaime Penalba Estebanez NighterMan email protected - email protected Credits to batchdrake as always / / // / / / // /\ \ / / / / / \ / / / / / / // / / / / // / / / //,///...

Dhost Interactive SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Title : Dhost Interactive SQL Injection Vulnerability Vendor Link: : http://www.dhost.hk/...

OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability

OpenSSH sshd with ChallengeResponseAuthentication enabled is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Sqlninja 0.2.6 is now available

Sqlninja 0.2.6 is now available Sqlninja's goal is to exploit SQL injection vulnerabilities on web applications that use Microsoft SQL Server as back end. It is released under the GPLv3.There are a lot of other SQL injection tools out there but sqlninja, instead of extracting the data, focuses on...

Sqlninja 0.2.6 is now available

Sqlninja 0.2.6 is now available Sqlninja's goal is to exploit SQL injection vulnerabilities on web applications that use Microsoft SQL Server as back end. It is released under the GPLv3.There are a lot of other SQL injection tools out there but sqlninja, instead of extracting the data, focuses on...

Oracle Hyperion Enterprise Performance Management arsqls24.dll缓冲区溢出漏洞

Oracle Hyperion Enterprise Performance Management是性能管理软件。 Oracle Hyperion Enterprise Performance Management在实现上存在安全漏洞，可被恶意用户利用控制用户系统。 在解析数据库连接字符串时，arsqls24.dll中存在边界错误。通过诱使用户打开特制的Hyperion Interactive Reporting Studio .oce文件造成栈缓冲区溢出。 Oracle Hyperion Enterprise Performance Management EPM 11.x 厂商补丁：...

Oracle DataDirect ODBC Drivers - HOST Attribute 'arsqls24.dll' Stack Buffer Overflow (PoC)

g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=0000008b ebx=00000000 ecx=00410041 ed...

Oracle DataDirect ODBC Drivers - HOST Attribute arsqls24.dll Stack Buffer Overflow (PoC)

Oracle DataDirect ODBC Drivers - HOST Attribute arsqls24.dll Stack Buffer Overflow PoC g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception ha...

Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based

Exploit for windows platform in category dos / poc g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception hand...

PT-2011-3085

Name of the Vulnerable Software and Affected Versions Google App Engine Python SDK versions prior to 1.5.4 Description A cross-site request forgery CSRF issue exists in the Interactive Console of the Google App Engine Python SDK. This allows remote attackers to hijack the authentication of...

PT-2011-4884

Name of the Vulnerable Software and Affected Versions Google App Engine Python SDK versions prior to 1.5.4 Description The issue is related to the FakeFile implementation in the sandbox environment, which does not properly control the opening of files. This allows local users to bypass intended...

PT-2011-4886

Name of the Vulnerable Software and Affected Versions Google App Engine Python SDK versions prior to 1.5.4 Description The issue is related to the sandbox environment in the Google App Engine Python SDK, which does not properly restrict the use of the os module. This allows local users to bypass...

CVE-2011-4213: Undefined Security Weakness

The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a fileblobstorage.os reference within the code parameter to...