openSUSE Security Update : mozilla-nss (openSUSE-SU-2013:1868-1)

This update fixes the following security issue with mozilla-nss : - update to 3.15.3.1 bnc854367 - includes certstore update 1.95 bmo946351 explicitely distrust AC DG Tresor SSL - adapt specfile to ppc64le %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Updated xbmc package fixes a security vulnerability

Due to flaws in the embedded copy of libDCR, a fork of dcraw.c, in the embedded copy of CxImage, opening a specially crafted photo file could trigger a division by zero, an infinite loop, or a null pointer dereference, resulting in a denial of service CVE-2013-1438. This update fixes those flaws...

Fedora Update for mingw-poppler FEDORA-2014-0204

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4960

CVE-2012-4960 covers a DES-based password encryption weakness in Huawei networking devices (including NE5000E, NE40E/80E, CX/ CX600, and related models). The root cause is use of DES for stored passwords, enabling brute-force or context-dependent attacks to recover cleartext passwords. Public adv...

Iranian nuclear program hit by AC/DC virus

A scientist working at the Atomic Energy Organisation of Iran said computer systems have been hit by a cyber-attack which forced them to play AC/DC's Thunderstruck at full volume in the middle of the night. The attack came to light after a researcher at security firm F-Secure received a string of...

Eaton Network Shutdown Module Detection

The remote web server is part of Network Shutdown Module, from Eaton Corporation formerly MGE Office Protection Systems. It is used to monitor UPS-protected computers and shut them down gracefully if AC power fails. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6008...

Cisco AnyConnect Secure Mobility Client VPN Downloader RCE (cisco-sa-20120620-ac)

The remote host has a version of Cisco AnyConnect 2.5 MR6. Such versions are potentially affected by an arbitrary code execution vulnerability. The WebLaunch VPN downloader implementation does not properly validate binaries that are received, which can allow remote attackers to execute arbitrary...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting the following products: Cisco ASA 5500 Series Adaptive Security Appliances Cisco ASA Cisco Catalyst 6500 Series ASA Service Module Cisco ASASM Cisco AnyConnect Secure Mobility Client Cisco Application Control Engine...

AC&D Solutions SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Official Website: http://www.1337day.com 0 1 + Support...

AC&D Solutions - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Unfixed XSS vulnerability at webia90.ac-besancon.fr

Security researcher Xylitol, has submitted on 16/10/2009 a cross-site-scripting XSS vulnerability affecting webia90.ac-besancon.fr, which at the time of submission ranked 60684 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

CVE-2009-0238

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a...

Mandrake Security Advisory MDVSA-2009:016 (xen)

The remote host is missing an update to xen announced via advisory MDVSA-2009:016. OpenVAS Vulnerability Test $Id: mdksa2009016.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:016 xen Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

MS Windows InternalOpenColorProfile Heap Overflow PoC (MS08-046)

No description provided by source. EMRSETICMPROFILEA Heap Overflow DOS By Ac!dDrop related to MS08-046 Tested on windows Xp professional Sp2 mscms.dll 5.1.2600.2709 gdi32.dll 5.1.2600.2818 Causes Windows explorer and Internet explorer to crash. You can run arbitary code...

Microsoft Windows - InternalOpenColorProfile Heap Overflow (PoC) (MS08-046)

EMRSETICMPROFILEA Heap Overflow DOS By Ac!dDrop related to MS08-046 Tested on windows Xp professional Sp2 mscms.dll 5.1.2600.2709 gdi32.dll 5.1.2600.2818 Causes Windows explorer and Internet explorer to crash. You can run arbitary code...

Micrsoft Windows GDI (CreateDIBPatternBrushPt) Heap Overflow PoC

No description provided by source. CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently...

Micrsoft Windows GDI (CreateDIBPatternBrushPt) Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================ Micrsoft Windows GDI CreateDIBPatternBrushPt Heap Overflow PoC ================================================================ CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop...

Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)

Microsoft Windows - GDI CreateDIBPatternBrushPt Heap Overflow PoC CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently...

Unfixed XSS vulnerability at www3.ac-nancy-metz.fr

Security researcher SpyHackerz, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting www3.ac-nancy-metz.fr, which at the time of submission ranked 16172 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is...

Microsoft Word object pointer memory corruption vulnerability

Overview A memory corruption vulnerability in Microsoft Word could allow a remote attacker to execute arbitrary code with the privileges of the user running Word. Description Microsoft Word contains a memory corruption vulnerability. According to Microsoft Security Bulletin MS06-027:When a user...