[SECURITY] Fedora 17 Update: libproxy-0.4.10-1.fc17

libproxy offers the following features: extremely small core footprint 35K no external dependencies within libproxy core libproxy plugins may have dependencies only 3 functions in the stable external API dynamic adjustment to changing network topology a standard way of dealing with proxy settings...

EMC Networker Format String

This module exploits a format string vulnerability in the lgsprintf function as implemented in liblocal.dll on EMC Networker products. This module exploits the vulnerability by using a specially crafted RPC call to the program number 0x5F3DD, version 0x02, and procedure 0x06. This module has been...

Microsoft Internet Explorer execCommand Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Microsoft Internet Explorer execCommand Use-After-Free

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Fedora 17 : xen-4.1.2-24.fc17 (2012-11182)

in rare circumstances an unprivileged user can crash an HVM guest XSA-10 843766, remove a dependency on PyXML and Require python-lxml instead of PyXML 842843 adjust systemd service files not to report failures when running without a hypervisor or when xendomains.service doesn't find anything to...

DSA-2452-1 apache2 - insecure default configuration

Bulletin has no description...

GTA SA-MP server.cfg Local Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits GTA SA-MP server.cfg Local Buffer Overflow Vulnerability 0day Date: 9-26-11 Author: SilentDream Software Link: http://team.sa-mp.com/files/samp03csvrR2-2win32.zip Tested on: XP SP3, Windows 7 Thanks to: corelanc0d3r & team, Metasploit,...

Tumblr security flaw, Clarification by Tumblr official staff !

Tumblr security flaw, Clarification by Tumblr official staff ! On our yesterday post about Tumblr security flaw : server IPS, API keys, passwords, etc were leaked, Finally Tumblr official staff gives a statement to all their users as below : A human error caused some sensitive server configuratio...

MDVA-2009:121 : pulseaudio

Multiple bugs has been identified and corrected in pulseaudio: - alsa: allow configuration of fallback device strings in profiles util: if NULL is passed to papathgetfilename just hand it through alsa: don't hit an assert when invalid module arguments are passed - alsa: fix wording, we are speaki...

MoreAmp 0.1.25 Beta Buffer Overflow (SEH)

MoreAmp Seh Buffer Overflow meta Greetz:His0k4 , Bibi-info , Volc4n0 sec4ever.com require 'msf/core' class Metasploit3 'MoreAmp 0.1.25 Beta Buffer Overflow SEH', 'Description' = %q This module exploits a SEH overflow in 0.1.25 MoreAmp Beta By creating a specially crafted .m3u file, an an attacker...

Debian DSA-1910-1 : mysql-ocaml - missing escape function

It was discovered that mysql-ocaml, OCaml bindings for MySql, was missing a function to call mysqlrealescapestring. This is needed, because mysqlrealescapestring honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are used. The adde...

Soritong 1.0 - Universal Buffer Overflow (SEH) (Metasploit)

Soritong 1.0 - Universal Buffer Overflow SEH Metasploit Exploit Title: Soritong v1.0 Universal BOF-SEH META Version: V1.0 Tested on: windows xp 2 Metasploit version by FB1h2s,Orginal exploit by skullhaxor And greetz to corelanc0d3r team for all there cool tutorials, espesialy the Unicode one : Th...

IMail IMAP4D Delete Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'IMail IMAP4D...

Microsoft Message Queueing Service DNS Name Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Symantec ConsoleUtilities - ActiveX Buffer Overflow (Metasploit)

Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool. require 'msf/core' class Metasploit3 'Symantec ConsoleUtilities ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack overflow in Symantecs ConsoleUtilities...

Debian: Security Advisory (DSA-1911-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Web mirroring

This script makes a mirror of the remote web site and extracts the list of CGIs that are used by the remote host. It is suggested that you allow a long-enough timeout value for this test routine and also adjust the setting on the number of pages to mirror. SPDX-FileCopyrightText: 2009 Renaud...

pidgin security update

2.6.2-2 - Upstream backports: 97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab 37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time 40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid 2.6.2-1.1 - VV...

IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit

No description provided by source. !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler...

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to...