6638 matches found
Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)
The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...
Mac OS X mDNSResponder UPnP Location Overflow
require 'msf/core' class Metasploit3 'Mac OS X mDNSResponder UPnP Location Overflow', 'Platform' = 'osx', 'DefaultOptions' = 'SRVPORT' = 1900, 'RPORT' = 0 , 'Targets' = '10.4.8 x86', mDNSResponder-108.2 'Arch' = ARCHX86, Offset to mDNSStorage structure 'Offset' = 21000, 'Magic' = 0x8fe510a0,...
mDNSResponder 10.4.0 10.4.8 UPnP Location Overflow (OS X)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Exploit::Remote::Udp def initializeinfo = superupdateinfoinfo, 'Name' = 'Mac OS X mDNSResponder UPnP Location Overflow', 'Platform' = 'osx', 'DefaultOptions' = 'SRVPORT' = 1900, 'RPORT' = 0 ,...
Mozilla Foundation Security Advisory 2009-52
Mozilla Foundation Security Advisory 2009-52 Title: Form history vulnerable to stealing Impact: Moderate Announced: October 27, 2009 Reporter: Paul Stone Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Paul Stone reported that a user's form history, both...
mDNSResponder 10.4.0/10.4.8 (OSX) - UPnP Location Overflow (Metasploit)
require 'msf/core' class Metasploit3 'Mac OS X mDNSResponder UPnP Location Overflow', 'Platform' = 'osx', 'DefaultOptions' = 'SRVPORT' = 1900, 'RPORT' = 0 , 'Targets' = '10.4.8 x86', mDNSResponder-108.2 'Arch' = ARCHX86, Offset to mDNSStorage structure 'Offset' = 21000, 'Magic' = 0x8fe510a0,...
Facebook Password-Reset Spam is Botnet Attack
Virus hunters are raising the alarm for a large-scale spam attack that uses fake Facebook password-reset messages to trick PC users into downloading a dangerous piece of malware. The malicious executable is linked to the Bredolab botnet, which has been linked to massive spam runs and identity-the...
Form history vulnerable to stealing — Mozilla
Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft. A malicious web page could synthesize events such as mouse focus and key presses on behalf of the victim and trick the browser into auto-filling th...
To modify log file properties protect yourself will not be the administrator found-vulnerability warning-the black bar safety net
The log file location is actually stored in the registry,as long as we modify its attributes to mask their intrusion traces, Here only modify the default location,the log size of the property,such as log size 0 0 0 0 0 0 0 1,so that it can not be normal recording, So if you can perfect guarantee...
GLSA-200910-02 : Pidgin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200910-02 Pidgin: Multiple vulnerabilities Multiple vulnerabilities were found in Pidgin: Yuriy Kaminskiy reported that the OSCAR protocol implementation in Pidgin misinterprets the ICQWebMessage message type as the ICQSMS message...
Joomla Component com_ajaxchat 1.0 Remote File Include
Input passed to the "mosConfigabsolutepath" parameter in /components/comajaxchat/tests/ajcuser.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources. GLOBALSmosConfigabsolutepath Joomla Component...
Joomla! Component Ajax Chat 1.0 - Remote File Inclusion
Joomla Component comajaxchat Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=-...
Shibboleth Service Provider Version Detection
This script detects the installed version of Shibboleth Service Provider. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-3591
Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...
DEBIAN-CVE-2009-3591
Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...
CVE-2009-3591
Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...
CVE-2009-3591
Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...
CVE-2009-3591
Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...
BlackBerry, Other Smartphone Users Easy Spy Targets
iPhone lovers and other smartphone users should take heed: A security researcher showed ways to spy on a BlackBerry user during a presentation Wednesday, including listening to phone conversations, stealing contact lists, reading text messages, taking and viewing photos and figuring out the...
New vulnerabilities in OpenX
Hello 3APA3A! I want to warn you about Denial of Service, Cross-Site Scripting and Redirector vulnerabilities in OpenX. DoS Looped DoS: http://site/adclick.php About Looped DoS I wrote in my classification of DoS vulnerabilities in web applications http://websecurity.com.ua/2663/. Vulnerable are...
FTPShell Client Version Detection
Detects the installed version of FTPShell Client Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...