Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

In Bootstrap, XSS is possible in the collapse data-parent attribute...

kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c

It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash...

kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c

It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash...

kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c

It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash...

Mozilla: Multiple Use-after-free issues (MFSA 2012-58)

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a...

Mozilla: Multiple Use-after-free issues (MFSA 2012-58)

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a...

Simple Machines Forum XSS / XSRF / PHP Execution

This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

No description provided by source. Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/20...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

Exploit for unknown platform in category dos / poc =================================================== TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit =================================================== Author: Giuseppe 'Evilcry' Bonfa' Release Date: 15/08/2009...

TheGreenBow VPN Client - 'tgbvpn.sys' Local Denial of Service

Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/2009...

TheGreenBow VPN Denial Of Service

Original Advisory Link: https://www.evilfingers.com/advisory/Advisory/TheGreenBowVPNClienttgbvpn.sysDoS.php ++++++++++++++++++++++++++++++++++++++++++++++++++++ -----------TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa'...

CVE-2008-5731

The PGPwded device driver aka PGPwded.sys in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service system crash and possibly gain privileges via a certain METHODBUFFERED IOCTL request that overwrites portions of memory, related to a "Driv...

Design/Logic Flaw

The PGPwded device driver aka PGPwded.sys in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service system crash and possibly gain privileges via a certain METHODBUFFERED IOCTL request that overwrites portions of memory, related to a "Driv...

CVE-2008-5731

Summary of CVE-2008-5731 : The PGP Desktop product (PGPwded.sys and related IOCTL handling in pgpdisk.sys) is vulnerable to local DoS and potential privilege escalation. The issue arises from insufficient boundary checks on IRP data in certain METHOD_BUFFERED IOCTL requests, enabling memory overw...

CVE-2008-5731: Undefined Security Weakness

The PGPwded device driver aka PGPwded.sys in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service system crash and possibly gain privileges via a certain METHODBUFFERED IOCTL request that overwrites portions of memory, related to a "Driv...

CVE-2006-3170: Undefined Security Weakness

CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse or readall parameter to index.php, which reveals the installation path in an error message...

Windows Server 2003 and XP SP2 LAND attack vulnerability

Hello, everyone. Windows Server 2003 and XP SP2 with Windows Firewall turned off are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition...