6754 matches found
PT-2013-3551 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue is related to the tcp read sock function in the Linux kernel, which does not properly manage skb consumption. This allows local users to cause a denial of service, resulting in a...
PT-2013-4063
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3 Description The issue concerns the transmission of login credentials in an unencrypted manner, allowing remote attackers to intercept sensitiv...
D-Link DSL-320B - Multiple Vulnerabilities
D-Link DSL-320B suffers from persistent cross site scripting and multiple authentication bypass bypass vulnerabilities. Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL:...
OPC UA Publish Request Command
...
Discuz点触验证码插件验证绕过+密码明文传输
简要描述: 部分DZ论坛启用点触验证码后验证码完全没有起作用。同时由于更改了登录逻辑,还会造成论坛登录密码明文传输。 详细说明: 由于点触验证码插件的验证逻辑有问题,启用验证码之后可以简单绕过。同时由于更改了登录逻辑,会将DZ原本的md5传输的密文变成明文传输。 漏洞证明: 将红框中的display: none; 去掉,然后可以看到多了一个登录按钮。 这个按钮是没有启用验证逻辑的。直接输入用户名密码就可以登录。同时这样登录的话POST提交的是正常的md5加密后的密码。 但是如果输入验证码提交的话,POST数据就变成了: 其中可以看到明文的密码字段。...
CVE-2012-6129
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
DEBIAN-CVE-2012-6129
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
Stack overflow
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
CVE-2012-6129
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
PT-2013-1908
Name of the Vulnerable Software and Affected Versions Transmission versions prior to 2.74 Description The issue is a stack-based buffer overflow in the utp.cpp file of libutp, which can be exploited by remote attackers through crafted micro transport protocol packets. This can lead to a denial of...
CVE-2012-6129
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
CVE-2012-6129
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
CVE-2012-6129
CVE-2012-6129 is a stack-based buffer overflow in utp.cpp of libutp, affecting Transmission (and related products) prior to version 2.74. The vulnerability allows a remote attacker to crash the application (DoS) and potentially execute arbitrary code by sending crafted micro-transport protocol pa...
CVE-2012-6129: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
Fedora Update for krb5 FEDORA-2013-3116
Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2013-3116 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Reuters Editor Indicted for Helping Hackers Break Into Tribune Co.
A Reuters social media editor on Thursday was charged with helping hackers break into the Tribune Co.’s network shortly after he was fired from a Sacramento television station in Fall 2010. A U.S. Eastern District grand jury in Sacramento handed down a three-count indictment against Matthew Keys,...
DEBIAN-CVE-2013-2475
The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service application crash via a malformed packet...
[SECURITY] Fedora 17 Update: rubygem-json-1.6.8-1.fc17
This is a implementation of the JSON specification according to RFC 4627 in Ruby. You can think of it as a low fat alternative to XML, if you want to store data to disk or transmit it over a network rather than use a verbose markup language...
[SECURITY] Fedora 18 Update: rubygem-json-1.6.8-1.fc18
This is a implementation of the JSON specification according to RFC 4627 in Ruby. You can think of it as a low fat alternative to XML, if you want to store data to disk or transmit it over a network rather than use a verbose markup language...