PT-2013-3454

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.2.25 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault. This can be achieved by sending a MERGE request where the URI is configured for handling...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.23.1 - Parallel mtrr init between cpus Zhenzhong Duan Orabug: 16777774 - Merge tag 'v2.6.39-400.21.1.16748891' of git://ca-git.us.oracle.com/linux-uek-2.6.39-ofed into uek-2.6.39-400 Maxim Uvarov Orabug: 16748891 - xen-blkfront: use a different scatterlist for each request Roger Pau...

[360-FAAR v0.4.1] Firewall Analysis Audit And Repair

360-FAAR Firewall Analysis Audit and Repair is an offline, command line, Perl firewall policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA or ScreenOS commands, and its one file! Changes: This release...

Apache Httpd < 2.2.25 : mod_dav crash

Sending a MERGE request against a URI handled by moddavsvn with the source href sent as part of the request body as XML pointing to a URI that is not configured for DAV will trigger a segfault...

PT-2012-5725

Name of the Vulnerable Software and Affected Versions Fill PDF module versions prior to 7.x-1.2 Description The issue allows remote attackers to write to arbitrary PDF files via unspecified vectors related to the fillpdf merge pdf function and incorrect arguments. Recommendations For versions pri...

PT-2012-2453

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 before Support Pack 3 Description A cross-site scripting issue exists in the WebAccess component, allowing remote attackers to inject arbitrary web script or HTML via the merge parameter. Recommendations For Novel...

CVE-2012-0272: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...

Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

PT-2012-4410

Name of the Vulnerable Software and Affected Versions Android affected versions not specified on T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S Description The onTouchEvent method...

CVE-2012-2980: Undefined Security Weakness

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

IIS7. 0 website, the exploit and the Fix-vulnerability warning-the black bar safety net

To the currently popular PHP as an example: To merge a PHP word pictures of horses, the combined method: ① , DOS merge: copy 1.gif /b + 1. txt/a php.gif ② , With edjpgcom, make picture and word Trojan of the merger, remark Code of? php eval$POSTmeckun;?& gt; Pictures just to find one...

libxml2: Heap-based buffer overflow by adding new namespace node to an existing nodeset or merging nodesets

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when addi...

Video Merge split Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python import sys print "" print " Name:Video Merge split Local Buffer Overflow " print " Author:Angel Injection " print " Home Page:http://dev-point.com/ http://sec-krb.org/ " print " Note:Iam Angel Injection From the country of...

Linux Kernel 3.1 RC2 Released

Linux Kernel 3.1 RC2 Released Linus Torvalds has announced the release of Linux kernel 3.1 rc2. There isn't too much to see and Linus notes that this is a fairly calm release for coming just one week after the close of the Linux 3.1 kernel merge window. As LKML is down at the moment, below is the...

DEBIAN-CVE-2008-7277

Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...

CVE-2008-7277

Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...

CVE-2008-7277

Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...

Design/Logic Flaw

Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...

CVE-2008-7277

Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...

CVE-2008-7277

Open Ticket Request System (OTRS) before 2.3.0-beta4 is vulnerable to a merge-operations permission bypass. The authorization logic checks for the rw permission rather than the configured merge permission, potentially allowing remote authenticated users to bypass intended access restrictions when...