1627 matches found
Avast! Internet Security aswtdi.sys 0day Local DoS PoC
No description provided by source. / Exploit Title: Avast! Internet Security aswtdi.sys 0day Local DoS PoC Date: 2010-11-04 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.avast.com Version: up to date, version 5.0.677, aswtdi.sys version 5.0.677 Tested on: Win XP SP3 CVE :...
Quick Search 1.1.0.189 - Buffer Overflow Vulnerability (SEH)
No description provided by source. Exploit Title: Quick Search Version 1.1.0.189 Buffer Overflow vulnerabilitySEH Date: 14-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.glarysoft.com/ Software Link: http://download.glarysoft.com/qsearchsetup.exe Version: 1.1.0.189 Tested on: Windows...
G Data TotalCare 2011 0day Local Kernel Exploit
No description provided by source. / Exploit Title: G Data TotalCare 2011 0day Local Kernel Exploit Date: 2010-11-08 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.gdata.de/ Version: up to date, version 21.1.0.5, MiniIcpt.sys version 1.0.8.9 Tested on: Win XP SP3 CVE :...
CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow (0day)
No description provided by source. / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link: http://shop.ca.com/ca/products/internetsecurity/internetsecuritysuite.asp Version: up to...
CVE-2013-1883
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
CVE-2013-0197
Cross-site scripting XSS vulnerability in the filterdrawselectionarea2 function in core/filterapi.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML via the matchtype parameter to bugs/search.php...
PT-2014-2432
Name of the Vulnerable Software and Affected Versions MantisBT version 1.2.12 Description A cross-site scripting issue exists due to a vulnerability in the filter draw selection area2 function. This allows remote attackers to inject arbitrary web script or HTML via the match type parameter to the...
DEBIAN-CVE-2013-6410
nbd-server in Network Block Device nbd before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file...
CVE-2013-6410: Undefined Security Weakness
nbd-server in Network Block Device nbd before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file...
UBUNTU-CVE-2013-6410
nbd-server in Network Block Device nbd before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file...
CVE-2013-2099
Algorithmic complexity vulnerability in the ssl.matchhostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-sslmatchhostname as used for older Python versions, allows remote attackers to cause a denial of service CPU consumption via multiple wildcard...
DEBIAN-CVE-2013-2099
Algorithmic complexity vulnerability in the ssl.matchhostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-sslmatchhostname as used for older Python versions, allows remote attackers to cause a denial of service CPU consumption via multiple wildcard...
PT-2013-4915
Name of the Vulnerable Software and Affected Versions Python versions 2.6 through 3.4 Description The issue arises from the ssl.match hostname function in the SSL module, which fails to properly handle a '0' character in a domain name in the Subject Alternative Name field of an X.509 certificate...
Oracle Linux 5 : libxslt (ELSA-2008-0287)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0287 advisory. 1.1.17-2.0.1.el51.1 - Added libxslt-enterprise.patch and replaced doc/redhat.gif 1.1.17-2.el51.1 - fix a max number of steps in pattern match expressions bug -...
Quick Search 1.1.0.189 - Buffer Overflow (SEH)
Quick Search 1.1.0.189 - Buffer Overflow SEH Exploit Title: Quick Search Version 1.1.0.189 Buffer Overflow vulnerabilitySEH Date: 14-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.glarysoft.com/ Software Link: http://download.glarysoft.com/qsearchsetup.exe Version: 1.1.0.189 Tested o...
CVE-2013-1944
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL...
DEBIAN-CVE-2012-6139
libxslt before 1.1.28 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an 1 empty match attribute in a XSL key to the xsltAddKey function in keys.c or 2 uninitialized variable to the xsltDocumentFunction function in functions.c...
Null pointer dereference
libxslt before 1.1.28 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an 1 empty match attribute in a XSL key to the xsltAddKey function in keys.c or 2 uninitialized variable to the xsltDocumentFunction function in functions.c...
openssh, pam_ssh_agent_auth security update
CentOS Errata and Security Advisory CESA-2013:0519 Updated openssh packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A...
PT-2013-1790
Name of the Vulnerable Software and Affected Versions JForum version 2.1.9 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters, including the action, match typ...