Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities

The remote web server is running a version of Drupal that is 6.x prior to 6.35 or 7.x prior to 7.35. It is, therefore, potentially affected by the following vulnerabilities : - An access bypass vulnerability exists in which password reset URLs can be forged. This allows a remote attacker to gain...

Updated libpng packages fix two security vulnerabilities

Updated libpng12 and libpng packages fix security vulnerabilities: An integer overflow leading to a heap-based buffer overflow was found in the pngsetsPLT and pngsettext2 API functions of libpng. An attacker could create a specially-crafted image file and render it with an application written to...

CVE-2012-4464

Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the 1 exctos or 2 nameerrtos API function, which marks the string as tainted, a different vulnerability than CVE-2012-4466. NOTE:...

CVE-2012-3473

The 1 reports API and 2 administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions...

[oCERT-2009-017] PHP multiple issues

2009-017 PHP multiple issues Description: PHP, an open source scripting language, suffers from several bugs that may pose a security risk. The reported issues have been discovered in several API functions, issues include buffer overflows, near null reads/writes, arbitrary memory read and an...

Microsoft Windows LoadImage API Function Integer Overflow (CVE-2004-1049)

In terms of Microsoft Windows technology, a resource is binary data that can be added to the executable file of a Windows-based application. Graphical images such as icons, cursors and bitmaps are example of standard resources. Windows-based applications support loading and rendering of graphical...

4 kinds of the most popular Trojans bundled Controller skills-vulnerability warning-the black bar safety net

A traditional bundle This principle is very simple, is currently the most used one. Is the B. exe attached to A. exe at the end. So when A. exe to be executed when the B. exe also follow the implementation. This bundle of code over the network. My earliest is from jingtao's an article about the...

Visual Basic Enterprise Edition SP6 - 'vb6skit.dll' Buffer Overflow (PoC)

----------------------------------------------------------------------------- Visual Basic Enterprise Edition SP6 vb6skit.dll Buffer Overflow url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Visual Basic Enterprise Edition SP6 vb6skit.dll Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================================== Visual Basic Enterprise Edition SP6 vb6skit.dll Buffer Overflow PoC ===================================================================...

Bypassing PFW/HIPS open process control with uncommon identifier

Hello, We would like to inform you about a vulnerability in personal firewalls and HIPS software. Description: Windows operating systems with NT kernel version 5.0 and higher i.e. Windows 2000, XP, 2003 use integer numbers divisible by four to identify processes. Internal implementation of system...

Microsoft Netware Client Service Memory Corruption (MS06-066; CVE-2006-4688)

Client Services for NetWare CSNW provides a Windows workstation with access to NetWare file, print, and directory services. This gives users the ability to store and retrieve documents from NetWare file servers, print to NetWare print queues, and log on to Novell Directory Services NDS. By...

Microsoft Windows Server Service RPC Request Buffer Overrun (MS06-040; CVE-2006-3439)

The Server Service SRVSVC is one of the network services supplied by Microsoft. It supports file, print, and named-pipe sharing over Windows-based networks, and allows named pipe communication between applications running on distributed systems. By supplying malformed parameters to some of the AP...

CVE-2006-1443

Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within 1 CFStringGetFileSystemRepresentation or 2...

CVE-2006-0561

Cisco Secure Access Control Server ACS 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the...

CVE-2005-1407

CVE-2005-1407 affects Skype for Windows versions 1.2.0.0 through 1.2.0.46. The issue allows a local user to bypass the identity check for an authorized application and then call arbitrary Skype API functions by modifying or replacing that application. The underlying impact is limited to a local e...

CVE-2005-1407: Undefined Security Weakness

Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application...

[Full-disclosure] Maxthon browser multiple vulnerabilities advisory

Maxthon browser multiple vulnerabilities advisory URL: http://www.raffon.net/advisories/maxthon/multvulns.html Date: April 08, 2005 Author: Aviv Raff Introduction "Maxthon Internet Browser software is a powerful tabbed browser with a highly customizable interface. It is based on the Internet...