krb5 -- multiple denial of service vulnerabilities

Two vulnerabilities in krb5 can be used by remote attackers in denial of service attacks. The MIT security advisories report this as follows: An unauthenticated remote attacker can send an invalid request to a KDC process that will cause it to crash due to an assertion failure, creating a denial ...

Macromedia Flash Media Server Administration Service Denial of Service (CVE-2005-4216)

Macromedia Flash Media Server software provides streaming media capabilities and an environment for creating and delivering interactive media applications. The Flash Media Server can be administered through an administration server that listens on TCP port 1111 by default. There exists a denial o...

[SECURITY] Fedora 12 Update: ocsinventory-1.02.3-1.fc12

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...

[DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS

Digital Security Research Group DSecRG Advisory DSECRG-09-011 Application: HP StorageWorks 1/8 G2 Tape Autoloader Versions Affected: firmware v 2.30 and earlier Vendor URL: http://hp.com/ Bug: Privilege escalation Exploits: YES Reported: 30.09.2008 Vendor Response: 30.09.2008 Date of Public...

db2-das-info NSE Script

Connects to the IBM DB2 Administration Server DAS on TCP or UDP port 523 and exports the server profile. No authentication is required for this request. The script will also set the port product and version if a version scan is requested. Example Usage nmap -sV Script Output PORT STATE SERVICE...

Internet Explorer CVE-2010-0249 'srcElement()' Remote Code Execution Vulnerability

Description Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the browser. Successful exploits will compromise the application and possibly the computer. Failed attacks will cause...

IT-Grundschutz M4.186: Entfernen von Beispieldateien und Administrations-Scripts des IIS (Windows)

IT-Grundschutz M4.186: Entfernen von Beispieldateien und Administrations-Scripts des IIS Windows ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte...

HP StorageWork 1/8 G2 Tape Autoloader Privilege Escalation

DSECRG-09-011 HP StorageWorks 1/8 G2 Tape Autoloader - privilege escalation, DOS A vulnerability was found in Web Administration Interface of device HP StorageWorks 1/8 G2 Tape Autoloader. Default unprivileged user can escalate privileges to the administrator and execute DOS attack. Digital...

Simply Classified 0.2 Cross Site Request Forgery / Cross Site Scripting

Simply Classified 0.2 XSS & CSRF Vulnerabilities Download: http://www.hotscripts.com/listing/simplyclassifieds/ Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory:...

Simply Classified 0.2 XSS & CSRF Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Simply Classified 0.2 XSS & CSRF Vulnerabilities ================================================ Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Not...

Multiple D-Link Routers Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications =========================================================== Multiple D-Link Routers Authentication Bypass Vulnerability =========================================================== Multiple D-­Link routers suffer from insecure...

Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request Forgery

Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request Forgery Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory:...

E-membres 1.0 - Remote Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » E-membres v1.0 Remote Database...

Simply Classified 0.2 - Cross-Site Scripting / Cross-Site Request Forgery

Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory: http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-002-simply-classifieds-v0.2-xss-and-csrf/ Greetz...

DSA-1966-1 horde3 - cross-site scripting

Bulletin has no description...

CentOS 5 : krb5 (CESA-2007:0892)

Updated krb5 packages that correct a security flaw are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate t...

Multiple Vendor CUPS Administration Interface CGI Heap Overflow (CVE-2008-0047)

The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print jobs from client computers, process them, and send them to the appropriate printer. A heap...

WingFTP 3.2.4 Cross Site Request Forgery

Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software "Wing FTP server is not only a FTP server. It's a multi-protocol file serverFTP,...

IDEAL Administration 2009 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'IDEAL...

Colombian ISP - ETB Modem Issue

I've recently discovered a security hole on the modems which double as routers used by a Colombian ISP - ETB. It so happens that all incoming connections to an IP address on said ISP on port 23 or port 80 land on the modem instead of the computers connected to it. Even if one tries to redirect...