CVE-2010-4373: Undefined Security Weakness

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

PT-2010-5408

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.0 through 1.2.12 Wireshark versions 1.4.0 through 1.4.1 Description The issue is related to a heap-based buffer overflow in the dissect ldss transfer function in the LDSS dissector. This allows remote attackers to cause ...

PT-2010-3470

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and system crash, via a crafted image. Recommendations For Apple Mac OS X versions 10.6.x...

CVE-2010-4198

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted HTML document...

CVE-2010-4198: Improper Input Validation

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted HTML document...

Xerox 4595 Denial Of Service

!/usr/bin/perl Xerox 4595 Remote Dos November 1, 2010 By chap0 - The tongue has the power of life and death www.seek-truth.netwww.corelan.be:8800 Public Advisories http://www.xerox.com/downloads/usa/en/c/certXRX10-004v1.0.pdf http://www.corelan.be:8800/advisories.php?id=CORELAN-10-065 Greets to...

HP Data Protector Media Operations 6.11 HTTP Server Integer Overflow

Exploit for windows platform in category dos / poc ==================================================================== HP Data Protector Media Operations 6.11 HTTP Server Integer Overflow ==================================================================== Exploit Title: HP Data Protector Media...

PT-2010-5268

Name of the Vulnerable Software and Affected Versions Ghostscript affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in an incorrect pointer dereference and application crash, via crafted font data in a compressed data stream...

PT-2010-5265

Name of the Vulnerable Software and Affected Versions Opera versions prior to 10.63 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This occurs when a Flash movie with a transparent Window Mode property is not properly handled during...

blogit-(ing) Database Disclosure Exploit

!/usr/bin/perl -w blogit-ing Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r inj3ct0r.com L0rd...

CVE-2010-3229: Improper Input Validation

The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...

CVE-2010-3903

Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...

PT-2010-4525

Name of the Vulnerable Software and Affected Versions bip versions prior to 0.8.6 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via an empty USER command. Recommendations For versions prior to 0.8.6, update to...

CVE-2010-3071: Undefined Security Weakness

bip before 0.8.6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an empty USER command...

CVE-2010-3755: Undefined Security Weakness

The DASReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via data in a TCP packet. NOTE: this mig...

FileApp For iPhone / iPad / iPod Touch Directory Traversal

Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established. drwxr-xr-x 2 501 501 1564 Sep 29 18:1...

iOS FileApp 2.0 - Directory Traversal

iOS FileApp 2.0 - Directory Traversal Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established...

iOS FileApp < 2.0 - Directory Traversal

Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established. drwxr-xr-x 2 501 501 1564 Sep 29 18:1...

CVE-2010-3476

Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service CPU consumption via a large message, a different vulnerability than...

CVE-2010-3476: Improper Input Validation

Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service CPU consumption via a large message, a different vulnerability than...