Secunia Research: Microsoft Office FlashPix Tile Data Two Buffer Overflows

====================================================================== Secunia Research 14/12/2010 - Microsoft Office Two FlashPix Tile Data Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Microsoft Office PICT Filter Integer Truncation Vulnerability

====================================================================== Secunia Research 14/12/2010 - Microsoft Office PICT Filter Integer Truncation Vulnerability - ====================================================================== Table of Contents Affected...

n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...

HP LaserJet - Directory Traversal in PJL Interface

HP LaserJet - Directory Traversal in PJL Interface n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory...

HP LaserJet - Directory Traversal in PJL Interface

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...

Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC

Summary KONTAKT 4 PLAYER is the free sample player based on award-winning KONTAKT technology. Expanding the capabilities of its successful predecessor, the free KONTAKT 4 PLAYER allows for innovative, highly playable instruments leaving technological and musical limitations behind. Description...

Native Instruments Guitar Rig 4 Player v4.1.1 Insecure Library Loading Vulnerability

Summary GUITAR RIG 4 PLAYER is the free, modular and expandable effects processor from Native Instruments, combining creative effects routing possibilities with ease-of-use and pristine sound quality. The included FACTORY SELECTION library provides one stunning Amp emulation with Matched Cabinet,...

CVE-2010-4107

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers...

Secunia Research: Microsoft Office Drawing Shape Container Parsing Vulnerability

====================================================================== Secunia Research 09/11/2010 - Microsoft Office Drawing Shape Container Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Office Drawing Shape Container Parsing Vulnerability

No description provided by source. ====================================================================== Secunia Research 09/11/2010 - Microsoft Office Drawing Shape Container Parsing Vulnerability - ====================================================================== Table of Contents Affecte...

Update : Havij v1.13 automated SQL Injection tool - New version

Update : Havij v1.13 automated SQL Injection tool - New version "Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software user can perform...

Altova DatabaseSpy 2011 Project File Handling Buffer Overflow Vulnerability

Summary Altova DatabaseSpy® 2011 is the unique multi-database query, design, and database comparison tool. It connects to all major databases, easing SQL editing, database structure design, database content editing, database schema and content comparison, and database conversion for a fraction of...

Windows NTLM Weak Nonce Vulnerability

Exploit for windows platform in category remote exploits ===================================== Windows NTLM Weak Nonce Vulnerability ===================================== Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory URL:...

Exponent CMS v0.97 Multiple Vulnerabilities

Summary Open Source Content Management System PHP+MySQL. Description Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure Vulnerability 2. Arbitrary File Upload / File Modify Vulnerability 3. Reflected Cross-Site Scripting Vulnerability 1 LFI/FD occurs whe...

Secunia Research: Microsoft Excel Ghost Record Type Parsing Vulnerability

====================================================================== Secunia Research 12/10/2010 - Microsoft Excel Ghost Record Type Parsing Vulnerability - ====================================================================== Table of Contents Affected...

VERITAS NetBackup Remote Command Execution

VERITAS NetBackup Remote Command Execution. CVE-2004-1389. Remote exploits for multiple platform $Id: veritasnetbackupcmdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

Java Runtime CMM readMabCurveData Buffer Overflow

Added: 10/04/2010 CVE: CVE-2010-0838 BID: 39069 OSVDB: 63500 Background Oracle Java SE and Java for Business are development platforms for developing and deploying Java applications. They include the Java SE Development Kit JDK and the Java Runtime Environment JRE. The JRE provides the minimum...

Java Runtime CMM readMabCurveData Buffer Overflow

Added: 10/04/2010 CVE: CVE-2010-0838 BID: 39069 OSVDB: 63500 Background Oracle Java SE and Java for Business are development platforms for developing and deploying Java applications. They include the Java SE Development Kit JDK and the Java Runtime Environment JRE. The JRE provides the minimum...

network411 (Product.asp?intProdID) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== network411 Product.asp?intProdID SQL Injection Vulnerability ============================================================== Author : Shamus Location : Solo && Jogjakarta, Indonesia...

Secunia Research: Microsoft Outlook Content Parsing Integer Underflow Vulnerability

====================================================================== Secunia Research 14/09/2010 - Microsoft Outlook Content Parsing Integer Underflow Vulnerability - ====================================================================== Table of Contents Affected...