1709 matches found
CVE-2007-6755
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...
CVE-2007-6755
CVE-2007-6755 is the Dual_EC_DRBG-related vulnerability referenced in the initial description. The connected documents provide a concrete technical detail: in a Debian vulnerability listing, CVE-2007-6755 is associated with libuuid1 (libuuid1-2.36.1-8+deb11u1.amd64
CVE-2007-6755
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...
IBM AIX 6.17.1 - Local Privilege Escalation
IBM AIX 6.17.1 - Local Privilege Escalation Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link:...
UK Cryptographers Call For Publication of Deliberately Weakened Protocols, Products
A group of cryptographers in the UK has published a letter that calls on authorities in that country and the United States to conduct an investigation to determine which security products, protocols and standards have been deliberately weakened by the countries’ intelligence services. The letter,...
VoltEdit CMS SQL Injection / Shell Upload
========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...
Jolix Media Player 1.1.0 Denial Of Service
!/usr/bin/python print """ +Judul Ledakan:Jolix Media Player .m3u Denial of Service Exploit +Celah versi: Version 1.1.0 +Mengunduh produk: http://www.jolixtools.com/downloads/jolix-media-player-setup.exe +Hari Tanggal Tahun: 09.07.2013 +Penulis: IndonesiaGokilTeam +Dicoba di sistem operasi: Windo...
Jolix Media Player 1.1.0 - .m3u Denial of Service
Jolix Media Player 1.1.0 - .m3u Denial of Service !/usr/bin/python print """ +Judul Ledakan:Jolix Media Player .m3u Denial of Service Exploit +Celah versi: Version 1.1.0 +Mengunduh produk: http://www.jolixtools.com/downloads/jolix-media-player-setup.exe +Hari Tanggal Tahun: 09.07.2013 +Penulis:...
Jolix Media Player 1.1.0 - '.m3u' Denial of Service
!/usr/bin/python print """ +Judul Ledakan:Jolix Media Player .m3u Denial of Service Exploit +Celah versi: Version 1.1.0 +Mengunduh produk: http://www.jolixtools.com/downloads/jolix-media-player-setup.exe +Hari Tanggal Tahun: 09.07.2013 +Penulis: IndonesiaGokilTeam +Dicoba di sistem operasi: Windo...
Design/Logic Flaw
The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service system hang via a crafted packet to an IPv6 interface...
Novell iManager Multiple Vulnerabilities
The host is running Novell iManager and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbnovellimanagermultvuln.nasl 6079 2017-05-08 09:03:33Z teissa $ Novell iManager Multiple Vulnerabilities Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone Networks...
CVE-2013-1750: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4 file...
MLS Property Finder Improper Access Control
=========================================================== MLS Property Finder Improper Access Control Vulnerability =========================================================== :----------------------------------------------------------------------------------------------------------------------...
Free Monthly Websites 2.0 Multiple Vulnerabilities
Exploit for php platform in category web applications ========================================================================================== Free Monthly Websites 2.0 Multiple Vulnerabilities ==========================================================================================...
Aktiv Player 2.80 Crash PoC
Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: aktiv-player version 2.80 Exploit Author: IndonesiaGokilTeam Vendor Homepage: http://www.goforsharing.com/home-mainmenu-1/aktiv-player-mainmenu-131.html Tested on: Windows XP SP 3 sampah= "\x42" 200 file =...
MLE-Moodle 0.8.8.4 <= Local File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: MLE-Moodle 0.8.8.4 = Local File Inclusion Vulnerability Date: 19/12/2012 Author: GoLdM Libyan Page FaceBook http://www.facebook.com/pages/وَذَكِّـــرْ/337878286310383 Version: 2.3.0 Category:: Local File Disclosure Vulnerability...
Design/Logic Flaw
RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer...
Private Message System 2.3.0 <= XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Private Message System 2.3.0 alert1337; Test : http://upload.traidnt.net/upfiles/4ul41244.jpg Demo: 01 :http://ptl.su/pms/index.php?page="alert1337; 02 :http://qgcomedyshow.freehostia.com/community/mail/index.php?page="alert1337...
UMPlayer Portable 0.95 - Crash (PoC)
UMPlayer Portable 0.95 - Crash PoC Exploit Title: UMPlayer Portable Edition Date: 2012-11-28 Exploit Author: p3kok Vendor Homepage: http://www.umplayer.com/ Software Link: http://sourceforge.net/projects/umplayer/ or http://www.umplayer.com/download/ Version: 0.95Portable Edition Compiled 4.7.0...
PT-2012-5587 · Microsoft · .Net Framework
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.5 Description: The issue allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of a .NET Framework application or an XAML browser applicatio...