Secunia Research: KDE Okular PDB Parsing RLE Decompression Buffer Overflow

====================================================================== Secunia Research 25/08/2010 - KDE Okular PDB Parsing RLE Decompression Buffer Overflow - ====================================================================== Table of Contents Affected...

Adobe Device Central CS5 v3.0.1.0 (dwmapi.dll) DLL Hijacking Exploit

Summary Adobe® Device Central CS5 software simplifies the production of innovative and compelling content for mobile phones and consumer electronics devices. Adobe Device Central CS5 now offers support for HTML and the latest versions of Adobe Flash® Player software. Description Adobe Device...

Adobe Extension Manager CS5 v5.0.298 (dwmapi.dll) DLL Hijacking Exploit

Summary Easily install new extensions and manage the ones you already have with the Adobe Extension Manager. Description Adobe Extension Manager CS5 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extensions are .mxi...

CorelDRAW X3 v13.0.0.576 (crlrib.dll) DLL Hijacking Exploit

Summary Graphic design software for striking visual communication. Description CorelDRAW X3 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extensions are .cmx and .csl thru crlrib.dll library. / CorelDRAW X3...

Secunia Research: Opera "Download" Dialog File Execution Security Issue

====================================================================== Secunia Research 12/08/2010 - Opera "Download" Dialog File Execution Security Issue - ====================================================================== Table of Contents Affected...

Sports Accelerator Suite v2.0 (news_id) Remote SQL Injection Vulnerability

Summary Content Management System PHP+MySQL. Description The CMS is vulnerable to an SQL Injection attack when input is passed to the "newsid" parameter. The script fails to properly sanitize the input before being returned to the user allowing the attacker to compromise the entire DB system and...

Immunity Canvas: MS10_059

Name| ms10059 ---|--- CVE| CVE-2010-2554 Exploit Pack| CANVAS Description| ms10059 Notes| References: http://www.microsoft.com/technet/security/bulletin/MS10-059.mspx CVE Name: CVE-2010-2554 VENDOR: Microsoft Notes: This exploit gain SYSTEM from NETWORKSERVICE or DefaultAppPool user by duplicatin...

Ubuntu Update for likewise-open vulnerability USN-964-1

Ubuntu Update for Linux kernel vulnerabilities USN-964-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9641.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for likewise-open vulnerability USN-964-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-964-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secunia Research: Adobe Reader GIF Image Parsing Array-Indexing Vulnerability

====================================================================== Secunia Research 30/06/2010 - Adobe Reader GIF Image Parsing Array-Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Reader JPEG Uninitialised Memory Vulnerability

====================================================================== Secunia Research 30/06/2010 - Adobe Reader JPEG Uninitialised Memory Vulnerability - ====================================================================== Table of Contents Affected...

Open And Compact FTP Server 1.2 Full System Access

Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3 !/usr/bin/python Simply by omitting login process to the open ftp server it is...

UK One Media CMS (id) Error Based SQL Injection Vulnerability

Summary Content Management System PHP+MySQL. Description UK One Media CMS suffers from an sql injection vulnerability when parsing query from the id param which results in compromising the entire database structure and executing system commands. O / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ /...

Open&Compact Ftp Server <= 1.2 Full System Access

Exploit for windows platform in category remote exploits ================================================= Open&Compact Ftp Server = 1.2 Full System Access ================================================= Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Softwar...

(Gabriels FTP Server) Open Compact FTP Server 1.2 - Full System Access

Gabriels FTP Server Open Compact FTP Server 1.2 - Full System Access Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3...

(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Full System Access

Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3 !/usr/bin/python Simply by omitting login process to the open ftp server it is...

BFTPD 2.x匿名账号绕过ROOTDIR安全限制漏洞

BUGTRAQ ID: 40540 Bftpd是一款小型的FTP服务器。 bftpd处理匿名登录时可能会忽略配置文件中所指定的ROOTDIR选项，允许用户绕过限制获得对系统上任意文件或目录的读写访问。 BFTPD 2.x 厂商补丁： BFTPD ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://bftpd.sourceforge.net/news.html...

Adobe InDesign CS3 INDD File Handling Buffer Overflow Vulnerability

Summary Adobe® InDesign® CS3 software provides precise control over typography and built-in creative tools for designing, preflighting, and publishing documents for print, online, or to mobile devices. Include interactivity, animation, video, and sound in page layouts to fully engage readers...

FreeBSD Security Advisory (FreeBSD-SA-10:04.jail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:04.jail.asc ADV FreeBSD-SA-10:04.jail.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:04.jail.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

Adobe Photoshop CS4 Extended 11.0 ASL File Handling Remote Buffer Overflow PoC

Summary The Adobe® Photoshop® family of products is the ultimate playground for bringing out the best in your digital images, transforming them into anything you can imagine and showcasing them in extraordinary ways. Description Adobe Photoshop CS4 Extended suffers from a buffer overflow...