Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle. Mor...

EUVD-2006-2853

Malware in sbrugna...

Komodo Edit 9.2 / 9.3 Buffer Overflow

ActiveState komodoEdit9.2/9.3 preview browser buffer ''' go to preview browser preview with another file or url -payload- preview using In a komodo tab ''' Author: sultan albalawi video:https://www.facebook.com/pentest3/videos/vb.100012552940568/261386070956489/?type=2&theater Tested on:win7 from...

ActiveState Perl.exe x64 Client 5.20.2 - Crash (PoC)

Exploit Title: ActiveState Perl.exe x64 Client Denial of Service v5.20.2 Date: 9-3-2015 Software Link: http://www.activestate.com/activeperl/downloads/thank-you?dl=http://downloads.activestate.com/ActivePerl/releases/5.20.2.2002/ActivePerl-5.20.2.2002-MSWin32-x64-299195.msi Exploit Author: Robbie...

ActiveState Perl.exe x64 Client 5.20.2 - Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: ActiveState Perl.exe x64 Client Denial of Service v5.20.2 Date: 9-3-2015 Software Link:...

Microsoft IIS 4.0/5.0 Executable File Parsing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1912/info When Microsoft IIS receives a valid request for an executable file, the filename is then passed onto the underlying operating system which executes the file. In the event that IIS receives a specially formed...

ActivePerl 5.x,Cygwin 1.5.x System Function Call Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10375/info ActiveState Perl and Perl for cygwin are both reported to be prone to a buffer overflow vulnerability. The issue is reported to exist due to a lack of sufficient bounds checking that is performed on data that i...

ActivePerl 5.6.1 perlIIS.dll Buffer Overflow Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/3526/info ActivePerl is an implementation of the Perl scripting language for Microsoft Windows systems developed by Activestate. ActivePerl allows for high-performance integration with IIS using a DLL called 'perlIIS.dll'...

ActivePerl 5.8.8.817 - Local Buffer Overflow

ActivePerl 5.8.8.817 - Local Buffer Overflow Software Link:http://www.activestate.com Version: v5.8.8.817 Platform:Windows | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | | | | / | || | | | | || || | || |/ ||,|| |||, | / | |/ Exploit -------------------------------------------...

Design/Logic Flaw

ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the...

CVE-2006-2856

ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the...

CVE-2006-2856

ActivePerl 5.8.8.817 for Windows is affected. The vulnerability arises from configuring the site/lib directory with write access to the Users group, allowing local users to create a malicious sitecustomize.pl and escalate privileges. The available sources describe the root cause and impact as loc...

Kaspersky antivirus 6: HTTP monitor bypassing

Kaspersky antivirus 6 Kaspersky internet security 6 www.kaspersky.com Vulnerable Systems: KAV6, KIS6 Detail: The vulnerability is caused due to HTTP parsing errors in the HTTP monitor Kaspersky Web-antivirus. Any mailicious software on local computer can bypass HTTP virus monitor. Solution: There...

CVE-2004-0377

Buffer overflow in the win32stat function for 1 ActiveState's ActivePerl and 2 Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character...

[Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function Buffer Overflow Vulnerability

Perl win32stat Function Buffer Overflow Vulnerability iDEFENSE Security Advisory 04.05.04 www.idefense.com/application/poi/display?id=93&type=vulnerabilities April 5, 2004 I. BACKGROUND Perl is a popular programming language due to its text manipulation capabilities and rapid development cycle. I...

CVE-2001-0815

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension...