2463 matches found
Code injection
Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service device reload via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh975...
Code injection
Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...
No title provided
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service backend shutdown by "re-LOAD-ing" libraries from a certain plugins directory...
CVE-2009-3229
CVE-2009-3229 affects PostgreSQL core server components: versions 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 are vulnerable. Remote authenticated users can trigger a denial of service (backend shutdown) by re-loading libraries from a specific plugins directory. Remediation is to ap...
Update Protection against Cisco IOS Administrative Interface HTTP Authentication
Cisco Wireless LAN Controllers WLCs are responsible for system-wide wireless LAN functions, such as security policies, intrusion prevention, RF management, quality of service QoS, and mobility. An attacker with access to the administrative web interface via HTTP or HTTPS may cause the device to...
Apple Safari JavaScript 'Reload()' DoS Vulnerability - July09
This host is installed with Apple Safari Web Browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafarijsreloaddosvulnjul09.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari JavaScript 'Reload' DoS Vulnerability - July09 Authors: Sharath S Copyright:...
CVE-2009-2419
CVE-2009-2419 is a use-after-free vulnerability in WebKit’s servePendingRequests within Apple Safari 4.0 and 4.0.1. The issue can let remote attackers crash the browser or possibly execute arbitrary code via a crafted HTML document that references a zero-length .js file and the JavaScript reload ...
Apple Safari 4.x JavaScript Reload Remote Crash Exploit
No description provided by source. Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.2009 Tested on: -...
PJblog V3.0 注入漏洞
漏洞文件:action.asp 第14行 strcname=request"cname" set checkcdb=conn.execute"select from blogContent where logcname="""&strcname&"""" PJblog V3.0 官方补丁 ?php / PJblog V3.0 0day exp code by 小蟑螂&bink www.0kee.com www.t00ls.net 09.04.22 / $url="http://www.pjhome.net"; //注入地址 $varname="puterjam"; //管理员...
Cisco ASA/PIX Appliances Fail to Properly Check Fragmented TCP Packets
Exploit for hardware platform in category dos / poc ====================================================================== Cisco ASA/PIX Appliances Fail to Properly Check Fragmented TCP Packets ====================================================================== The vulnerability affects the...
Code injection
Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...
wicd
New wicd packages are available for Slackware 12.2 and -current to fix a security issue with the D-Bus configuration file that could allow local information disclosure such as network credentials. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...
Cross site request forgery (csrf)
The Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service device reload via a web...
Design/Logic Flaw
The Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service web authentication outage or device reload...
RE: DoS code for Cisco VLAN Trunking Protocol Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is Paul Oxman with Cisco PSIRT. For mitigations and workarounds, please consult the Cisco Security Response available at: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml Regards From: showrun.lee mailto:[email protected]...
Cisco VLAN Trunking Protocol Denial of Service Exploit
Exploit for hardware platform in category dos / poc ====================================================== Cisco VLAN Trunking Protocol Denial of Service Exploit ====================================================== /DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discriptio...
Cisco - VLAN Trunking Protocol Denial of Service
Cisco - VLAN Trunking Protocol Denial of Service /DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk...
Cisco - VLAN Trunking Protocol Denial of Service
/DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk Mode. Cisco Ethernet ports with no configuration a...
Cisco VLAN Trunking Protocol Denial Of Service
/DoS code for Cisco VLAN Trunking Protocol Vulnerability vulerability discription: http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml To Known: 1.the switch must in Server/Client Mode. 2.the port ,attacker connected,must be in trunk Mode. Cisco Ethernet ports with no configuration a...
CVE-2008-3802
Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service device reload via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability th...