HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/61745/info HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/61745/info HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the...

withU Music Share 1.3.7 Command Injection

Title: ====== withU Music Share v1.3.7 iOS - Command Inject Vulnerability Date: ===== 2013-08-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1040 VL-ID: ===== 1040 Common Vulnerability Scoring System: ==================================== 6.1 Introduction:...

samba -- denial of service vulnerability

The Samba project reports: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file...

Denial of service - CPU loop and memory allocation.

Description All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file share, or a local...

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH)

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow SEH !/usr/bin/python ========================================================================================== Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability SEH Date: 2013-08-03 Exploit Author: sagi-...

withU Music Share 1.3.7 iOS - Command Inject Vulnerability

Document Title: =============== withU Music Share 1.3.7 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1040 Release Date: ============= 2013-08-02 Vulnerability Laboratory ID VL-ID: ====================================...

ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln

Vulnerable product: ASUS RT-N66U when HTTPS WebService via AiCloud is enabled AC66R and RT-N65U are effected as well, but need more testing Vulnerabilities: - Linux 2.6.22 - Researched on both 3.0.0.4.270 and 3.0.0.4.354 firmware - Full directory traversal and plain text disclosure of all sensiti...

XSS in "Share Interface" - ownCloud

Multiple stored and reflected XSS have been adressed. Affected Software ownCloud Server 5.0.8 Action Taken Acknowledgements The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory: Lukas Reschke - ownCloud Inc. [email protected] -...

Server: XSS in "Share Interface"

Multiple stored and reflected XSS have been adressed. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

XSS and FPD vulnerabilities in Search and Share for WordPress

Hello 3APA3A! I want to inform you about vulnerabilities in Search and Share plugin for WordPress. These are Cross-Site Scripting and Full path disclosure vulnerabilities. These XSS holes are in ZeroClipboard.swf, which is used in the plugin. In February I've wrote about Cross-Site Scripting...

FreeBSD -- Incorrect privilege validation in the NFS server

Problem Description: The kernel incorrectly uses client supplied credentials instead of the one configured in exports5 when filling out the anonymous credential for a NFS export, when -network or -host restrictions are used at the same time. Impact: The remote client may supply privileged...

Samba 3.6.x < 3.6.6 Remote Security Bypass

According to its banner, the version of Samba 3.6.x running on the remote host is earlier than 3.6.6, and as such, it is potentially affected by a remote security bypass vulnerability because it fails to properly enforce CIFS share attributes. This may allow a remote, authenticated attacker to...

Stolen Opera Code-Signing Certificate Used to Sign Malware

Opera Software said it was able to contain the impact of a security breach that resulted in the theft of an expired code-signing certificate used to sign malware distributed to Windows users during a 36-minute stretch on June 19. Opera developer Sigbjorn Vik said the browser maker was victimized ...

File Level restore of a Linux VM cannot be transferred to a Windows Network Share

Challenge After launching a File Level Restore other os of a Linux server, and trying to copy a file to a Windows hosted share, the copy fails with "Access Denied". Cause Due to file permissions in Linux, the files cannot be copied to a Windows hosted share. A Linux SMB share will work with the...

Easy LAN Folder Share Version 3.2.0.100 - Buffer Overflow

Exploit for windows platform in category dos / poc Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerabilitySEH Date: 14-06-2013 Exploit Author: ariarat Vendor Homepage: http://www.mostgear.com Software Link:...

Easy LAN Folder Share 3.2.0.100 Buffer Overflow

Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerabilitySEH Date: 14-06-2013 Exploit Author: ariarat Vendor Homepage: http://www.mostgear.com Software Link: http://download.cnet.com/Easy-LAN-Folder-Share/3000-20854-10909166.html Version: 3.2.0.100 Tested on: Windows 7 ...

Easy LAN Folder Share 3.2.0.100 - Buffer Overflow

Easy LAN Folder Share 3.2.0.100 - Buffer Overflow Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerabilitySEH Date: 14-06-2013 Exploit Author: ariarat Vendor Homepage: http://www.mostgear.com Software Link:...

Easy LAN Folder Share 3.2.0.100 - Buffer Overflow

Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerabilitySEH Date: 14-06-2013 Exploit Author: ariarat Vendor Homepage: http://www.mostgear.com Software Link: http://download.cnet.com/Easy-LAN-Folder-Share/3000-20854-10909166.html Version: 3.2.0.100 Tested on: Windows 7 ...

Design/Logic Flaw

The cifsfindsmbses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user...