PT-2014-6747

Name of the Vulnerable Software and Affected Versions Cut the Rope: Time Travel aka com.zeptolab.timetravel.free.google version 1.3.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does n...

CVE-2014-5762: Undefined Security Weakness

The Cut the Rope: Time Travel aka com.zeptolab.timetravel.free.google application 1.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-6811

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.1.0 Description The issue is related to an integer overflow in the VNC display driver of the QEMU emulator. This overflow can be triggered by a CLIENT CUT TEXT message, leading to an infinite loop and eventually causin...

info fisier 1.0 - Multiple Vulnerabilities

Author : kaozc9 + Email : [email protected] + Site : www.paradisextem.co.cc + Team : ParadisexTeam + Dork : Powered by Info Fisier. =========================================XSS================================================== Affected Files: http://server/path/search.php...

Accmeware MP3 Cut 5.0.9 - DoS PoC

No description provided by source. Exploit Title: Accmeware MP3 Cut 5.0.9 DoS PoC Date: 12/20/2010 Author: 0v3r Software Link: http://www.mp3-cutter-splitter.com/Files/MCSetup.exe Version: 5.0.9 Tested on: Windows XP SP3 EN VirtualBxox CVE: N/A The application crashes when trys to cut a malformed...

Microsoft Windows 2000/2003/XP Keyboard Event Privilege Escalation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/14743/info Microsoft Windows is prone to a privilege escalation weakness. This issue is due to a design error when desktop applications handle keyboard events sent through the keybdevent function. The specific issue is th...

Cisco Firewall Services Module DoS

Race conditions in cut-through proxy function...

Cisco Firewall Services Module Software Denial of Service (cisco-sa-20140219-fwsm)

The remote Cisco Firewall Services Module FWSM device is affected by a denial of service DoS vulnerability due to a flaw in the cut-through proxy function. A remote, unauthenticated attacker could potentially exploit this vulnerability to cause a reload of the affected system, with repeated...

Race condition

Race condition in the cut-through proxy feature in Cisco Firewall Services Module FWSM Software 3.x before 3.228 and 4.x before 4.115 allows remote attackers to cause a denial of service device reload via certain matching traffic, aka Bug ID CSCuj16824...

CVE-2014-0710

Race condition in the cut-through proxy feature in Cisco Firewall Services Module FWSM Software 3.x before 3.228 and 4.x before 4.115 allows remote attackers to cause a denial of service device reload via certain matching traffic, aka Bug ID CSCuj16824...

PT-2014-1316

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module FWSM Software versions 3.x before 3.228 Cisco Firewall Services Module FWSM Software versions 4.x before 4.115 Description A race condition in the cut-through proxy feature of the Cisco Firewall Services Module...

CVE-2014-0710: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the cut-through proxy feature in Cisco Firewall Services Module FWSM Software 3.x before 3.228 and 4.x before 4.115 allows remote attackers to cause a denial of service device reload via certain matching traffic, aka Bug ID CSCuj16824...

Cisco Firewall Services模块Cut-Through Proxy远程拒绝服务漏洞

Bugtraq ID:65662 CVE ID:CVE-2014-0710 Cisco Firewall Services Module是一款多个cisco产品上使用的防火墙服务模块。 Cisco Catalyst 6500 Series Switches和Cisco 7600 Series Routers上的Cisco FWSM软件所包含的cut-through代理功能在释放内存时存在竞争条件错误，允许远程攻击者发送特殊的能触发cut-through代理验证条件的通信，可使受影响设备重载，造成拒绝服务攻击。 0 Cisco Firewall Services Module Cisco...

Cisco Firewall Services Module Cut-Through Proxy Denial of Service Vulnerability

Cisco Firewall Services Module FWSM Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to a race condition when releasing the memory allocated by the cut-through proxy function. An attacker could...

Fedora Update for gpm FEDORA-2013-12321

Check for the Version of gpm OpenVAS Vulnerability Test Fedora Update for gpm FEDORA-2013-12321 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 19 Update: gpm-1.20.6-33.fc19

Gpm provides mouse support to text-based Linux applications like the Emacs editor and the Midnight Commander file management system. Gpm also provides console cut-and-paste operations using the mouse and includes a program to allow pop-up menus to appear at the click of a mouse button...

Directory traversal

Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service file deletion or renaming via 1 the uploadPath parameter...

CVE-2013-0136

Mutiny Mutiny Frontend EditDocument servlet contains directory traversal weaknesses disclosed for the Mutiny 5 appliance. The vulnerability allows authenticated users to perform operations (UPLOAD, DELETE, CUT, COPY) via injected parameters (uploadPath, paths[], newPath) to read arbitrary files, ...

Mutiny FrontEnd Arbitrary File Read and Delete (CVE-2013-0136)

A directory traversal vulnerability has been reported in EditDocument servlet from the frontend on the Mutiny 5 appliance. Commands for UPLOAD, DELETE, CUT and COPY are all vulnerable to directory traversal attacks...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0466-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...