865 matches found
JDK: insecure deserialization in CORBA, incorrect CVE-2013-5456 fix
The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 does not properly deserialize classes in an AccessController...
SOL17447 - Linux kernel UDF vulnerabilities CVE-2014-9728, CVE-2014-9729, and CVE-2014-9730
Recommended Action If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are currently...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the libxml2-debuginfo-2.6.26 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the glibc-headers-2.17 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the samba4-pidl-4.0.0 package for the CentOS operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information...
PT-2014-3532 · Ovirt · Ovirt-Engine-Dwh
Name of the Vulnerable Software and Affected Versions: ovirt-engine-dwh versions prior to 3.3.3 Description: The issue allows local users to obtain sensitive information by reading an unspecified file, as the setup script stores the history database password in cleartext. Recommendations: For...
CVE-2012-6516
creationtimestamp| type| source ---|---|--- 2012-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18778...
Indian Government Computers are also Corrupted like Government
Indian Government Computers are also Corrupted like Government One of the Indian Hacker named "nomcat " claim to hack into the Indian Prime Ministers Office Computers and install R.A.T remote administration tool in them. He also Expose the Vulnerability in Income Tax website and Database...
Kathmandu Metropolitan City website database hacked by T34mT!g3R
Kathmandu Metropolitan City website database hacked by T34mT!g3R Hackers of Team "T34mT!g3R" today expose the SQL injection Vulnerability in Kathmandu Metropolitan City website and extract the database of site. Hacker post the Database info and Vulnerable Link at pastebin...
'The Hacker News' Magazine - Social Engineering Edition - Issue 02 - May,2011 Released !
'The Hacker News' Magazine - Social Engineering Edition - Issue 02 - May,2011 Released ! We are happy to Announce that 'The Hacker News' THN Magazine Issue 02 May 2011 is Out . This time we cover "Social Engineering Edition" . The Index of Content is as Given Below : Social Engineering Opsony By...
CVE-2010-2438
creationtimestamp| type| source ---|---|--- 2010-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13954...
CVE-2008-2627
creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5730...
FENCE-Pro and Systemwalker Desktop Encryption self-decoding file vulnerability
Overview Fujitsu's encryption software FENCE-Pro and Systemwalker Desktop Encryption share the same components. A vulnerability exists in self-decoding files created using this software. Impact The third party could view the contents of self-decoding files and obtain the passwords used for the...
groupe-rfi.txt
┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...
CVE-2007-5373
ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the changepassword function...
PT-2004-3214
Name of the Vulnerable Software and Affected Versions: BEA WebLogic Server and Express versions 5.1 through SP13 BEA WebLogic Server and Express versions 6.1 through SP6 BEA WebLogic Server and Express versions 7.0 through SP4 BEA WebLogic Server and Express versions 8.1 through SP2 Description:...
Multiple Vendor SOAP server array DoS
No description provided...
Note for "Invalid ContentType may disclose cache directory"
Note for "Invalid ContentType may disclose cache directory" This vulnerability"Invalid ContentType may disclose cache directory" doesn't work on all systems. "Invalid ContentType may disclose cache directory", at http://www.safecenter.net/UMBRELLAWEBV4/threadid10008/ Please note that execdror6 an...
Microsoft Help and Support Center contains buffer overflow in code used to handle HCP protocol
Overview There is a buffer overflow in the Microsoft Help and Support Center that could permit an attacker to execute arbitrary code with SYSTEM privileges. Description The Microsoft Help and Support Center is a facility within WIndows to provide product help and documentation. Among other things...