kernel: panic when submitting certain 0-length I/O requests

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device...

Design/Logic Flaw

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

CVE-2010-4685

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

CVE-2010-4685: Improper Certificate Validation

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

Cross site request forgery (csrf)

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix f...

PT-2011-1466 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: The issue allows local users to cause a denial of service, resulting in a system panic. This can be achieved by submitting a zero-length I/O request in a device ioctl to a SCSI device,...

Joomla! Component JE Auto - Local File Inclusion

Joomla! Component JE Auto - Local File Inclusion Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Joomla! Component JE Auto - Local File Inclusion

Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,SeeMe,MaYur,MA1201,KeDar,Sonic,gunslinger,Sn!pEr.S!...

Joomla JE Auto Local File Inclusion

Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,SeeMe,MaYur,MA1201,KeDar,Sonic,gunslinger,Sn!pEr.S!...

Joomla Component com_jeauto LFI Vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component comjeauto LFI Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /...

Pandora FMS <= 3.1 Mullti Vulnerability

Exploit for php platform in category web applications ======================================= Pandora FMS = 3.1 Mullti Vulnerability ======================================= Path Traversal: PHP File Inclusion or RFI/LFI: Remote/Local file inclusion - CVE-2010-4281 -CVE-2010-4282 - CVSS 8.5/10...

DEBIAN-CVE-2010-4168

Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow 1 remote attackers to cause a denial of service invalid write and daemon crash by abruptly disconnecting during transmission of the map from the server, related to network/networkserver.cpp; 2 remote attackers to cause a...

Design/Logic Flaw

Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow 1 remote attackers to cause a denial of service invalid write and daemon crash by abruptly disconnecting during transmission of the map from the server, related to network/networkserver.cpp; 2 remote attackers to cause a...

Image of the Day: Mapping E-banking Fraud

We spend our days combing the ‘Net for interesting security happenings and also noting the great work that other reporters and researchers are doing on the security front. Usually that means traditional reporting work: pulling together information from a bunch of different sources, digging for...

PYSEC-2010-29

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

Ошибка на Google Maps привела к вторжению войск Никарагуа в Коста-Рику

Подразделение армии Никарагуа вторглось на территорию Коста-Рики, сориентировавшись по неправильно составленной карте на сервисе Google Maps. Об этом сообщает костариканская газета La Nacion. Командир подразделения объяснил свои действия тем, что руководствовался картой Google Maps, согласно...

Google Chrome < 7.0.517.41 Multiple Vulnerabilities

Binary data 800924.prm...

Google Chrome < 7.0.517.41 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 7.0.517.41. Such versions are reportedly affected by multiple vulnerabilities : - It is possible to spam profiles via autofill / autocomplete. Issue 48225, 51727 - An unspecified crash exists relating to forms. Issue 48857 ...

Apache 2.0.x < 2.0.47 Multiple Vulnerabilities (DoS, Encryption)

The remote host appears to be running a version of Apache 2.x prior to 2.0.47. It is, therefore, affected by multiple vulnerabilities : - An issue in may occur when the SSLCipherSuite directive is used to upgrade a cipher suite which could lead to a weaker cipher suite being used instead of the...

Fedora Update for lib3ds FEDORA-2010-14644

Check for the Version of lib3ds OpenVAS Vulnerability Test Fedora Update for lib3ds FEDORA-2010-14644 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...