MPlayer Lite M3U Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in MPlayer Lite r33064, caused by improper bounds checking of an URL entry. By persuading the victim to open a specially-crafted .M3U file, specifically by drag-and-dropping it to the player, a remote attacker can execute arbitrary...

Ubuntu Update for libvpx vulnerability USN-1087-1

Ubuntu Update for Linux kernel vulnerabilities USN-1087-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10871.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libvpx vulnerability USN-1087-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

CVE-2011-0162

Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service device reset via unspecified traffic on the local wireless network...

CVE-2011-0162

Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service device reset via unspecified traffic on the local wireless network...

Wireshark Multiple Vulnerabilities - March-11 (Windows)

The host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnmar11win.nasl 7024 2017-08-30 11:51:43Z teissa $ Wireshark Multiple Vulnerabilities - March-11 Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Network...

Oracle Document Capture ActiveX Control WriteJPG Buffer Overflow (CVE-2010-3599)

Oracle Document Capture supplies document scanning and indexing capabilities. It installs an ActiveX control NCSECWLib on web clients. A buffer overflow vulnerability has been reported in the NCSECWLib ActiveX control included with Oracle Document Capture. The vulnerability is due to improper...

ZDI-11-081: Adobe Flash Player Point Object Remote Code Execution Vulnerability

ZDI-11-081: Adobe Flash Player Point Object Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-081 February 8, 2011 -- CVE ID: CVE-2011-0578 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Flash Player --...

Memory corruption

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking, a different vulnerability than CVE-2011-0559,...

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking, a different vulnerability than CVE-2011-0559,...

Adobe Flash Player Point Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within construction ...

WhiteCat logcleaner version 1.0 [edition]

Данная утилита предназначена для системных администраторов для: 1. Контроля размера лог-файлов на сервере 2. Для проверки на уязвимость своего сервера на возможность доступа к лог-файлам сервера Любое иное использование скрипта преследуется по закону Клинеры все эти конечно круто, но во многих по...

CVE-2011-0046

Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...

PRTG V8.1.2.1809 XSS Bugs in login.htm and error.htm

XSS Reflected Bugs in login.htm and error.htm ================================================================ PRTG V8.1.2.1809 All OS Versions: http://www.paessler.com/ I have discovered two XSS bugs within PRTG version 8.1.2.1809. These bugs are in the login.htm and error.htm documents. These...

PRTG 8.1.2.1809 Cross Site Scripting

XSS Reflected Bugs in login.htm and error.htm ================================================================ PRTG V8.1.2.1809 All OS Versions: http://www.paessler.com/ I have discovered two XSS bugs within PRTG version 8.1.2.1809. These bugs are in the login.htm and error.htm documents. These...

SuSE 11.1 Security Update : glibc (SAT Patch Number 2700)

This update of glibc fixes the following bugs and security issues : - The implementation of initgroups of the nsscompat module omits all NIS groups at the second invocation within the same process, and also uses a needlessly inefficient method to determine the NIS groups. - An integer overflow th...

Toolza 1.0

=== Toolza1.0 === Nix/Windows/Mac - UTF-8 perlscript download last version at the end of this post /последнюю версию скачать можно снизу этого поста Данная утилита предназначена для тестирования своего веб-ресурса на уязвимости. Любое другое использование скрипта преследуется по закону Last updat...

sudo -- local privilege escalation

Todd Miller reports: Beginning with sudo version 1.7.0 it has been possible to grant permission to run a command using a specified group via sudo's -g option run as group, if allowed by the sudoers file. A flaw exists in sudo's password checking logic that allows a user to run a command with only...

Mac App Store Safeguards Bypassed, Opening Up Pirated Apps

Just a day after Apple introduced its Mac App Store, some users already have found a way around the DRM system designed to ensure that they have paid for the apps that they’re using. The technique seems to work only on apps that don’t correctly implement the method for checking the App Store...

Aesop GIF Creator 2.1 Buffer Overflow

!/usr/bin/python Exploit Title: Aesop GIF Creator = v2.1 .aep Buffer Overflow Exploit Date: 12/15/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsec at x-sploited.com Software Link: http://www.yukudr.com/h84561/aesopsetup.exe Vulnerable version: = v2.1 Tested on:...

SAP NetWeaver Business Client SapThemeRepository ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP NetWeaver Business Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...