CVE-2013-4256

Multiple stack-based and heap-based buffer overflows in Network Audio System NAS 1.9.3 allow local users to cause a denial of service crash or possibly execute arbitrary code via the 1 display command argument to the ProcessCommandLine function in server/os/utils.c; 2 ResetHosts function in...

SimpleTransfer 2.2.1 - Command Injection Vulnerabilities

Document Title: =============== SimpleTransfer 2.2.1 - Command Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=937 Release Date: ============= 2013-05-02 Vulnerability Laboratory ID VL-ID: ==================================== 93...

Pitrinec MacroToolworks 7.5 Buffer Overflow

Title: ====== Pitrinec MacroToolworks 7.5 - Buffer Overflow Vulnerability Date: ===== 2012-03-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=466 VL-ID: ===== 466 Introduction: ============= Macro Toolworks is powerful all-in-one Windows automation macro software. It...

Apple Mac OS X本地特权提升漏洞(CVE-2011-3463)

Bugtraq ID: 51816 CVE ID：CVE-2011-3463 Apple Mac OS X是苹果公司发布的操作系统 WebDAV共享用户验证处理存在问题，在服务器上拥有合法账户的用户或其绑定的目录可以系统特权执行任意代码。此问题不影响OS X Lion之前版本 0 Apple Mac Os X Server 10.7.2 Apple Mac Os X Server 10.7.1 Apple Mac Os X Server 10.7 厂商解决方案 Apple Mac Os X Server 10.7.3已经修复此漏洞，建议用户下载使用：...

ghostscript: gs_init.ps searched in current directory despite -P-

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different...

Mssql rebound injection record collection-vulnerability warning-the black bar safety net

One night a study of SA injection point when Hua B to I came some information Made up to do a recording. Skull more and more bad with the Hey Change the administrator password ‘;update user set pwd=’1519804e89226cf9893a05d9e3fc8bbb’ where LogonName=’hmingming’;– ----------------------------- Colu...

CVE-2010-4096

share/ma/keysforuser in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command...

McAfee LinuxShield remote/local Code Execution Vulnerability

Exploit for unknown platform in category remote exploits ============================================================ McAfee LinuxShield remote/local Code Execution Vulnerability ============================================================ Title: McAfee LinuxShield remote/local code execution...

IE的ActiveX本地执行代码漏洞

clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B 这段代码运行后并不会立即执行，它会向注册表中写入一个启动项，重启后就可以看到结果了！ IE6,7,8 暂时使用其它非IE内核的浏览器 html object classid='clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B' id='target' /object script language='vbscript' targetFile = "c:\WINDOWS\system32\wshom.ocx" prototype = "Sub RegWrite ByVa...

HP-UX Update for shar(1) HPSBUX00304

Check for the Version of shar1 OpenVAS Vulnerability Test HP-UX Update for shar1 HPSBUX00304 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

HP-UX Update for envd HPSBUX02073

Check for the Version of envd OpenVAS Vulnerability Test HP-UX Update for envd HPSBUX02073 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Design/Logic Flaw

Untrusted search path vulnerability in the 1 "VST plugin with Python scripting" and 2 "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory,...

Java applets can be used to read sensitive information – Opera Security Advisories

Java applets can be used to read sensitive information – Opera Security Advisories OPCOM Team | December 16, 2008 Severity: Highly Severe Problem Description Once a Java applet has been cached, if a page can predict the cache path for that applet, it can load the applet from the cache, causing it...

CVE-2008-4394

Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the 1 ys-apps/portage, 2 net-mail/fetchmail, 3 app-editors/le...

Gentoo Security Advisory GLSA 200410-26 (socat)

The remote host is missing updates announced in advisory GLSA 200410-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200412-09 (ncpfs)

The remote host is missing updates announced in advisory GLSA 200412-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-09 (Spamassassin)

The remote host is missing updates announced in advisory GLSA 200606-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200410-26 (socat)

The remote host is missing updates announced in advisory GLSA 200410-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Java Plugin same-origin-policy bypass

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier, and 1.3.121 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors...

Java Plugin same-origin-policy bypass

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier, and 1.3.121 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors...