Kwik Pay Payroll 4.10.3 - .zip Denial of Service

Kwik Pay Payroll 4.10.3 - .zip Denial of Service Exploit Title: Kwik Pay Payroll .zip DoS Date: April 1, 2010 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com File - Restore Database - Find Locate zip file Click the restore button at the bottom...

Microsoft Windows XPVista - .ani tagBITMAPINFOHEADER Denial of Service

Microsoft Windows XPVista - .ani tagBITMAPINFOHEADER Denial of Service source: https://www.securityfocus.com/bid/38579/info Microsoft Windows is prone to a remote denial-of-service vulnerability when processing '.ani' files. Successful exploits will cause the vulnerable applications that use the...

ChemViewX v1.9.5 ActiveX Control Mutliple Stack Overflows

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ChemviewX ActiveX Control Multiple Stack Overflows Versions affected: v1.9.5 +-----------+ |Description| +-----------+ Hyleos ChemviewX is a free ActiveX control used to visualize...

Novell eDirectory < 8.8.5 ftf1/8.7.3.10 ftf2 NULL Base DN DoS

The remote host is running eDirectory, a directory service software from Novell. The installed version of eDirectory is affected by a denial of service issue. By sending a search request with an undefined BaseDN, it may be possible for an attacker to make the directory server unresponsive. C...

django -- denial-of-service attack

Django project reports: Django's forms library includes field types which perform regular-expression-based validation of email addresses and URLs. Certain addresses/URLs could trigger a pathological performance case in these regular expression, resulting in the server process/thread becoming...

Low: Red Hat Security Advisory: lftp security and bug fix update

An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file transfer program for the FTP and HTTP protocols. Lik...

High security hole in NullLogic Groupware

Hi, I've identified a couple of security flaws affecting the NullLogic Groupware which may allow compromise of accounts, denial of service or even remote code execution. These issues were reported by email to the developer but no response was forthcoming. Tim -- Tim Brown...

RHEL 4 / 5 : device-mapper-multipath (RHSA-2009:0411)

Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper multipath packages provide tools to manage multipath...

device, kpartx security update

CentOS Errata and Security Advisory CESA-2009:0411 Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper...

RedHat Update for IBMJava2 RHSA-2008:0133-01

Check for the Version of IBMJava2 OpenVAS Vulnerability Test RedHat Update for IBMJava2 RHSA-2008:0133-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

websvn-xssfhce.txt

WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...

DoS vulnerability in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Google Chrome. Данная уязвимость является частью моего проекта Day of bugs in browsers http://websecurity.com.ua/2453/. DoS: Эксплоит:...

easyrealtor-sql.txt

Original article: http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/ "EasyRealtorPRO 2008 provides you with all features you need to setup your own business oriented real estate website on your own domain name. Our support team will install the script on your server and then you c...

Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)

/ source: https://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become unresponsive, denying service to legitimate users. / include include int mainint...

RHEL 2.1 : IBMJava2 (RHSA-2008:0133)

IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...

MDKA-2007:077 : console-tools

vt-is-UTF8 utility included in console-tools package, and used by Mandriva initscripts, can hang, causing random problems like preventing a local/remote system reboot, unless user take interactive action 27948. Also, when executed on a terminal different from a linux vt, it can cause errors and...

Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities

Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/23926/info OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits can allow attackers to cause the...

Progress WebSpeed 3.03.1 - Denial of Service

Progress WebSpeed 3.03.1 - Denial of Service //source: https://www.securityfocus.com/bid/23778/info // //WebSpeed is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. // //Successful exploits can allow attackers to cause the application to becom...

PulseAudio 0.9.5 - Assert() Remote Denial of Service

PulseAudio 0.9.5 - Assert Remote Denial of Service source: https://www.securityfocus.com/bid/23240/info PulseAudio is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to consume excessive system resources until the software becomes unresponsive to...

HYSA-2006-008.txt

------------------------------------------------------ HYSA-2006-008 h4cky0u.org Advisory 017 ------------------------------------------------------ Date - Wed May 17 2006 TITLE: ====== myBloggie 2.1.3 CRLF & SQL Injection SEVERITY: ========= Medium SOFTWARE: ========= myBloggie 2.1.3...