Chilkat Software FTP2 - ActiveX Component Remote Code Execution

Chilkat Software FTP2 - ActiveX Component Remote Code Execution obj.UnlockComponent"suntzu"; //needed for file transfer operations, type whatever here obj.Port=21; //configure ftp connection obj.Hostname="192.168.0.1"; //change here obj.ConnectTimeout=5; obj.Passive=1; var x; x=obj.Connect; if x=...

kernel: setup_arg_pages: diagnose excessive argument size

The setupargpages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIGSTACKGROWSDOWN is used, does not properly restrict the stack memory consumption of the 1 arguments and 2 environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of...

Professional Penetration Testing Guide

Here is the another good book in the field of penetration testing. Unlike other books which aims only at the technical aspects of Penetration testing, this one explains every step involved in the making of a Professional Pentester. Rather than just teaching how to use the existing tools, it does...

FoxPlayer 2.4.0 Denial Of Service

Exploit Title: FoxPlayer 2.4.0 .m3u Denial of Service Date: 30 / 11 / 2010 Author: Oh Yaw Theng Software Link: http://www.foxmediatools.com/installers/fox-player-setup.exe Version: v2.4.0 Tested on: Windows XP SP 2 CVE : N / A Description : This is the latest version of FoxPlayer from the officia...

Mihan shop (ir) Setup Basic Site Settings Vulnerability

Exploit for php platform in category web applications ======================================================= Mihan shop ir Setup Basic Site Settings Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Mihan shop (ir) Setup Basic Site Settings Vulnerability

Exploit for php platform in category web applications...

Joovili 3.1.8 Setup Basic Site Settings Vulnerability

Exploit for php platform in category web applications ===================================================== Joovili 3.1.8 Setup Basic Site Settings Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

CVE-2010-3040

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager ICM before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a 1 HandleUpgradeAll, 2 AgentUpgrade, 3 HandleQueryNodeInfoReq, or 4 HandleUpgradeTrace TCP packet, aka...

CVE-2010-3040: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager ICM before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a 1 HandleUpgradeAll, 2 AgentUpgrade, 3 HandleQueryNodeInfoReq, or 4 HandleUpgradeTrace TCP packet, aka...

ZDI-10-232: Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability

ZDI-10-232: Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-232 November 7, 2010 -- CVE ID: CVE-2010-3040 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco Unifie...

Cisco ICM Setup Manager multiple security vulnerabilities

Multiple vulnerabilities in Agent.exe TCP/40078...

Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco ICM. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When processing the...

Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco ICM. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When handling the...

[security bulletin] HPSBMA02605 SSRT100238 rev.1 - HP Insight Managed System Setup Wizard for Windows, Remote Arbitrary File Download

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02573176 Version: 1 HPSBMA02605 SSRT100238 rev.1 - HP Insight Managed System Setup Wizard for Windows, Remote Arbitrary File Download NOTICE: The information in this Security Bulletin should be...

CVE-2010-4103

Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-4103

HP Insight Managed System Setup Wizard for Windows prior to version 6.2 is affected by a vulnerability that could allow a remote attacker to download arbitrary files. The issue is documented as CVE-2010-4103 and is cited by HP’s security bulletin HPSBMA02605 (SSRT100238 rev.1), which lists HP Ins...

CVE-2010-4103: Undefined Security Weakness

Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

PT-2010-5298

Name of the Vulnerable Software and Affected Versions HP Insight Managed System Setup Wizard versions prior to 6.2 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.2, update to version 6.2 or later to resolve the issue...

Sawmill Enterprise < v8.1.7.3 Multiple Vulnerabilities

Exploit for unknown platform in category shellcode ====================================================== Sawmill Enterprise v8.1.7.3 Multiple Vulnerabilities ====================================================== ======================================================================= title:...

NJ Takedown puts spotlight on sophisticated bust out schemes

HED: NJ Takedown puts spotlight on sophisticated bust out schemes DEK: Mike Braatz of Memento Security says the complex schemes can run for years and may be the biggest source of banking fraud – but you didn’t hear that from the banks When FBI agents descended on Sang-Hyun a.k.a “Jimmy” Park and...