[security bulletin] HPSBST02848 SSRT101112 rev.1 - HP XP P9000 Command View Advanced Edition Suite Products, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03691745 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03691745 Version: 1 HPSBST02848...

PT-2012-5530 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.25.16 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 through 8.32.27 Cisco Adaptive Security Appliances ASA 5500 series devices version...

Buffer overflow

Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 through 7.2 before 7.25.6, 8.0 before 8.05.26, 8.1 before 8.12.53, 8.2 before 8.25.18, 8.3...

Sysax 5.53 - SSH 'Username' Remote Buffer Overflow Remote Code Execution (Egghunter)

!/usr/bin/python Title: Sysax " sys.exit1 host = sys.argv1 port = intsys.argv2 egghunter = "\x66\x81\xca\xff\x0f\x42\x52\x6a\x02\x58\xcd\x2e\x3c\x05" "\x5a\x74\xef\xb8\x44\x4e\x57\x50\x8b\xfa\xaf\x75\xea\xaf" "\x75\xe7\xff\xe7" msfpayload windows/shellbindtcp LPORT=4444 R | msfencode -e -e...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.08.13, 7.1 and 7.2 before 7.25.4, 8.0 before 8.05.25, 8.1 and 8.2 before 8.25.11, 8.3 before 8.32.23, 8.4 before 8.42.6, and 8.5 before 8.51.1...

Cisco Security Advisory: Cisco Wireless LAN Controllers Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Wireless LAN Controllers Denial of Service Vulnerability Document ID: 112916 Advisory ID: cisco-sa-20110427-wlc Revision 1.0 For Public Release 2011 April 27 1600 UTC GMT...

CVE-2011-0394

Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 before 7.08.11, 7.1 and 7.2 before 7.25.1, 8.0 before 8.05.19, 8.1 before 8.12.47, 8.2 before 8.22.19, and 8.3 before 8.31.8; Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module aka FWSM...

CVE-2011-0394

Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 before 7.08.11, 7.1 and 7.2 before 7.25.1, 8.0 before 8.05.19, 8.1 before 8.12.47, 8.2 before 8.22.19, and 8.3 before 8.31.8; Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module aka FWSM...

Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities Advisory ID: cisco-sa-20110126-csg2 http://www.cisco.com/warp/public/707/cisco-sa-20110126-csg2.shtml Revision 1.0 For Public Release 2011 January 26 1600 UTC GMT...

CVE-2010-3056

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 dbsearch.php, 2 dbsql.php, 3 dbstructure.php, 4 js/messages.php, 5 libraries/common.lib.php, 6...

CVE-2010-2273

Multiple cross-site scripting XSS vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to...

flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

Lexmark Printer Detection

The remote host is a Lexmark printer. By querying the device information page, this plugin attempts to identify the model, and various other key software versions such as kernel, engine, base installed on the remote Lexmark device. C Tenable Network Security, Inc. include"compat.inc"; if...

Huawei EchoLife HG520 3.10.18.5-1.0.5.0 - Remote Information Disclosure

Huawei EchoLife HG520 3.10.18.5-1.0.5.0 - Remote Information Disclosure source: https://www.securityfocus.com/bid/39646/info The Huawei EchoLife HG520 is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further...

Huawei EchoLife HG520 3.10.18.5-1.0.5.0 - Remote Information Disclosure

source: https://www.securityfocus.com/bid/39646/info The Huawei EchoLife HG520 is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. The following Huawei EchoLife HG520 firmware and software versions...

Huawei EchoLife HG520c Denial of Service and Modem Reset

Exploit for hardware platform in category dos / poc ======================================================== Huawei EchoLife HG520c Denial of Service and Modem Reset ======================================================== Exploit Title: Huawei EchoLife HG520c Denial of Service and Modem Reset...

Huawei EchoLife HG520 Remote Information Disclosure

Exploit for hardware platform in category remote exploits =================================================== Huawei EchoLife HG520 Remote Information Disclosure =================================================== Exploit Title: Huawei EchoLife HG520 Remote Information Disclosure Date: 2010-04-19...

Huawei EchoLife HG520 - Remote Information Disclosure

Huawei EchoLife HG520 - Remote Information Disclosure Exploit Title: Huawei EchoLife HG520 Remote Information Disclosure Date: 2010-04-19 Author: hkm Product Link: http://www.huawei.com/mobileweb/en/products/view.do?id=660 Firmware Versions: 3.10.18.7-1.0.7.0 3.10.18.5-1.0.7.0 3.10.18.4 Software...

Xxe

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are...

PT-2009-3421 · Elby +1 · Virtual Clonedrive +4

Name of the Vulnerable Software and Affected Versions: ElbyCDIO.sys versions 6.0.2.0 and earlier AnyDVD versions prior to 6.5.2.6 Virtual CloneDrive versions 5.4.2.3 and earlier CloneDVD versions 2.9.2.0 and earlier CloneCD versions 5.3.1.3 and earlier Description: The issue exists due to an erro...