71 matches found
Microsoft Internet Explorer 6/7 - Remote Denial of Service
Exploit Title: IE6 / 7 Remote Dos vulnerability Date: 27/07/2010 Author: Richard leahy Version: 6 / 7 Tested on: Windows Xp Sp3 category Remote Dos, might lead to code execution. The vulnerability is caused due to specifying a large value integer or string to the frame.frameBorder causing a dos a...
FreeBSD ld-elf本地权限提升漏洞
FreeBSD是一款开放源代码的基于BSD的操作系统。 在ld-elf对环境变量处理存在本地权限提升漏洞 FreeBSD包含的Run-Time Link-Editor rtld存在问题,本地攻击者可以利用漏洞获得root特权。 一般情况下,在执行类似"ping"或"su" setugid的程序时,RTLD不允许设置类似LDPRELOAD这类的危险环境变量,不过存在漏洞可让rtld被诱使在setugid程序上接收LD变量,导致特权提升。 FreeBSD 8.0-RELEASE FreeBSD 7.1-RELEASE 厂商解决方案 目前没有解决方案提供:...
CVE-2009-4098
OpenX OpenX banner-edit.php
Mozilla Firefox Multiple Denial Of Service Vulnerabilities - Sep09 (Linux)
The host is installed with Firefox browser and is prone to multiple Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultdosvulnsep09lin.nasl 5055 2017-01-20 14:08:39Z teissa $ Mozilla Firefox Multiple Denial Of Service Vulnerabilities - Sep09 Linux Authors: Sharath...
Multiple Products NSS Library Buffer Overflow Vulnerability
Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Products is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Mozilla Firefox / Thunderbird / Seamonkey multiple seucrity vulnerabilities
Crossite scripting, crossite data access, memory corruptions, code execution, filtering bypass, user session tracking...
CVE-2008-1712
PHP remote file inclusion vulnerability in includes/functionsweblog.php in mxBB mxblogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...
TFTP Server 1.3 - Remote Buffer Overflow (Denial of Service) (PoC)
Name : TFTPServerMT v 1.3 Remote Buffer Overflow Dos Exploit Author: Umesh Wanve Date: 01-03-2007 Desc: This is latest version of TFTP server. EDI gets overwritten at 246. So code execution may be possible Someone can better write it. Sending a long file name on the vulnerable server can crash th...
Fedora Core 4 : libtiff-3.7.1-6.fc4.3 (2006-878)
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...
CVE-2006-6235
A "stack overwrite" vulnerability in GnuPG gpg 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory...
Echo Security Advisory 2006.41
ECHOADV41$2006 --------------------------------------------------------------------------- ECHOADV41$2006 BufferOverflow in Midirecord2 --------------------------------------------------------------------------- Author : Dedi Dwianto Date : July, 25th 2006 Location : Indonesia, Jakarta Web :...