UBUNTU-CVE-2017-7833

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combine...

Brave Software: homograph-attack (unicode vuln)

Hi team Summary: Affacted product appears identicaly different websites domains attacker uses unicode to register domains that look identical to real domains ,These fake domains can be used to fool users into signing into a fake website, thereby handing over their login credentials to an...

Logitech Webcam Software 1.1 - 'eReg.exe' Local Buffer Overflow (SEH Unicode)

Title: Logitech Webcam Software 1.1 eReg.exe SEH/Unicode Buffer Overflow Date: 9-10-2015 Target tested: Windows 7 x64 Software Link: http://www.logitech.com/pub/techsupport/quickcam/lws110x64.exe Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Description: The...

Logitech Webcam Software 1.1 - eReg.exe SEH/Unicode Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits Title: Logitech Webcam Software 1.1 eReg.exe SEH/Unicode Buffer Overflow Date: 9-10-2015 Target tested: Windows 7 x64 Software Link: http://www.logitech.com/pub/techsupport/quickcam/lws110x64.exe Author: Robbie Corley Contact: email protecte...

GLSA-201406-18 : rxvt-unicode: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201406-18 rxvt-unicode: User-assisted execution of arbitrary code rxvt-unicode does not properly handle OSC escape sequences, including those used to read and write X window properties. Impact : A remote attacker could entice a us...

CVE-2014-3121

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

MGASA-2014-0202 Updated rxvt-unicode packages fix CVE-2014-3121

Updated rxvt-unicode package fixes security vulnerability: rxvt-unicode aka urxvt before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary comma...

Orbit Downloader URL Unicode Conversion Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Linux-PAM: Privilege escalation

Background Linux-PAM Pluggable Authentication Modules is an architecture allowing the separation of the development of privilege granting software from the development of secure and appropriate authentication schemes. Description Marcus Granado repoted that Linux-PAM does not properly handle user...

Make someone's broiler to take the initiative to find you-vulnerability warning-the black bar safety net

Make someone's broiler to take the initiative to find you.·· A looking for a broiler of simple method First, you need a little something nc.exe the. What something?! Al quack, I don't know, yourself and slowly the search engine inside looking for that you think is what's what sprinkle. Then edit...

CentOS Update for perl CESA-2008:0522 centos3 i386

Check for the Version of perl OpenVAS Vulnerability Test CentOS Update for perl CESA-2008:0522 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

TippingPoint IPS Signature Evasion

======================================================================== = TippingPoint IPS Signature Evasion = = Vendor Website: = http://www.tippingpoint.com = = Affected Version: = TippingPoint IPS running TOS versions 2.1 & 2.2.0 - 2.2.4 = = Vendor Notified. 18th January 2006 = Public...

Hack job: network intrusion detection initial detection method-vulnerability warning-the black bar safety net

Carefully configure the Win2000 server can Defense 9 0% or more of intrusion and penetration, however, like the previous Chapter, the end of the mentioned:system security is a continuous process, as new vulnerabilities appear and the server application changes, the system of the security situatio...

CVE-2004-0224

Multiple buffer overflows in 1 iso2022jp.c or 2 shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."...

pWins Perl Web Server Directory Transversal Vulnerability

From www.sourceforge.net/projects/pwins: "pWins is a webserver-software based on perl and ruby not yet code. My aim is to make it fast, small and secure, supporting cgi perl, ruby and php scripts. It's easy to install and configurate!" versions: 0.2.5 and earlier, tested on Windows only...

Aladdin eSafe Gateway Script-filtering Bypass through Unicode Vulnerability

29 May 2001 This is the third of 3 sequential advisories we are issuing regarding Aladdin eSafe Gateway. Status -------- The entire content of this advisory was reviewed and acknowledged by Aladdin. Product Background -------------------------- eSafe Gateway is an Internet Content Security produc...

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (7)

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 7 !/usr/bin/perl IIS 4.0/5.0 Unicode Exploit Checks for each script that has been posted on the BugTraq Lis Shouts to bighawkthats for help, datagram, Ghost Rider, The Duke, p4, kript0n and others Since It Uses fork, you gotta ke...

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (6)

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 6 / iisex iis exploit grtz to: Bio, nos, zoa, reg and vor... who else would stay up at night to exploit this? to securax securax@efnet - also to kim, glyc, s0ph, tessa, lamagra and steven. / include include include include includ...

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (8)

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 8 !/usr/bin/perl See http://www.securityfocus.com/vdb/bottom.html?section=exploit&vid=1806 Very simple PERL script to execute commands on IIS Unicode vulnerable servers Use port number with SSLproxy for testing SSL sites Usage:...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (6)

/ iisex iis exploit grtz to: Bio, nos, zoa, reg and vor... who else would stay up at night to exploit this? to securax securax@efnet - also to kim, glyc, s0ph, tessa, lamagra and steven. / include include include include include include include include int mainint argc, char argv char buffy666; /...