Apple Mac OS X AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability

Description Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer. This issue is confirmed to affect Mac ...

CVE-2008-0706

Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...

Design/Logic Flaw

ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html...

FreeBSD : e2fsprogs -- heap buffer overflow (299e3f81-aee7-11dc-b781-0016179b2dd5)

Theodore Y. Ts'o reports : Fix a potential security vulnerability where an untrusted filesystem can be corrupted in such a way that a program using libext2fs will allocate a buffer which is far too small. This can lead to either a crash or potentially a heap-based buffer overflow crash. No known...

HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01311918 Version: 1 HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Security Bullet...

[security bulletin] HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01300486 Version: 1 HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button QLB Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Securi...

HP-UX PHNE_35483 : s700_800 11.00 sendmail(1M) 8.9.3 patch

s700800 11.00 sendmail1M 8.9.3 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability may be exploited remotely to gain unauthorized access and create a Denial of Service...

MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= MkPortal = 1.1.1 reviews / gallery modules SQL Injection Exploit ================================================================= ?php / i MkPortal "reviews" and "gallery"...

[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage &#40;SMH&#41; for Linux, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...

Microsoft Windows Ndistapi本地拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的NDISTAPI.sys驱动实现机制上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Windows的NDISTAPI.sys驱动是内核态组件，但允许非特权用户的访问，因此任意用户态应用程序都可以向这个设备写入数据： Ndistapi.sys Windows XP SP2 ; stdcall NdisTapiDispatchx, x .text:000115E8 NdisTapiDispatch@8 proc near ; DATA XREF:...

CA BrightStor ARCserve Tape Engine Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...

CVE-2007-0139

Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "unintended privileged access to data and system resources" via unspecified vectors, related to 1...

USN-338-1: MySQL vulnerabilities

Dmitri Lenev discovered that arguments of setuid SQL functions were evaluated in the security context of the functions' definer instead of its caller. An authenticated user with the privilege to call such a function could exploit this to execute arbitrary statements with the privileges of the...

CVE-2006-4370

Affected software / component: Alt-N WebAdmin (versions 3.2.3–3.2.4 with MDaemon 9.0.5; possibly earlier). Root cause / vulnerability: A flaw in WebAdmin’s handling of authentication/authorization via the userlist.wdm mechanism allows a remote authenticated domain administrator to change a global...

CVE-2006-2580

Multiple unspecified vulnerabilities in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors...

CVE-2006-2580

Technical details about CVE-2006-2580 are not publicly available in the provided documents; no specific affected product versions, root cause, or exploit information are disclosed here. Monitor for updates.

CVE-2006-2580

Multiple unspecified vulnerabilities in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors...

HP-UX PHSS_33842 : s700_800 11.X OV NNM7.01 Intermediate Patch 9

s700800 11.X OV NNM7.01 Intermediate Patch 9 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. These vulnerabilities could be exploited remotely by an unauthorized user to gain privilege...

HP-UX PHSS_34202 : s700_800 11.X OV NNM6.4x/ET2.0x Intermediate Patch 14

s700800 11.X OV NNM6.4x/ET2.0x Intermediate Patch 14 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. These vulnerabilities could be exploited remotely by an unauthorized user to gain...

HP-UX PHSS_34099 : s700_800 11.23 OV NNM7.50 IA-64 Consolidated Patch 3

s700800 11.23 OV NNM7.50 IA-64 Consolidated Patch 3 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. These vulnerabilities could be exploited remotely by an unauthorized user to gain...