Debian Security Advisory DSA 3221-1 (das-watchdog - security update)

Adam Sampson discovered a buffer overflow in the handling of the XAUTHORITY environment variable in das-watchdog, a watchdog daemon to ensure a realtime process won OpenVAS Vulnerability Test $Id: deb3221.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3221-1 using nvtg...

Debian: Security Advisory (DSA-3221-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

No description provided by source. My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The detailed vulnerability disclosures...

SAP NetWeaver J2EE DAS service - Unauthorized Access

Application: SAP NetWeaver JAVA Vendor URL: http://www.sap.com Bugs: Unauthorized access Reported: 20.04.2013 Vendor response: 21.04.2013 Date of Public Advisory: 15.07.2015 Reference: SAP Security Note 1945215 Authors: Alexander Polyakov ERPScan VULNERABILITY INFORMATION Class: Unauthorized Acce...

Unfixed XSS vulnerability at www.subisu.net.np

Security researcher Himanshu Kumar Das, has submitted on 06/01/2012 a cross-site-scripting XSS vulnerability affecting www.subisu.net.np, which at the time of submission ranked 225374 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. ...

CVE-2012-0711

CVE-2012-0711 is a remote code execution/privilege-escalation vulnerability in the DB2 Administration Server (DAS) of IBM DB2. The issue is a heap-based buffer overflow caused by an integer signedness error in the db2dasrrm process and affects UNIX platforms on: DB2 9.1 GA through FP11, DB2 9.5 G...

Nmap NSE net: db2-das-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

England cricket board XSS vunrebility found by Rishabh Das !

England cricket board XSS vunrebility found by Rishabh Das ! Link :...

IBM DB2 Universal Database receiveDASMessage Buffer Overflow (CVE-2011-0594)

IBM DB2 Database is a relational database management system that includes the DB2 Administration Server DAS service. The DB2 Administration Server DAS assists the Control Center and Configuration Assistant in enabling remote administration of DB2 database instances, providing the facility for job...

CVE-2011-0731

CVE-2011-0731 describes a buffer overflow in the IBM DB2 Administration Server (DAS) component. Affected products/versions include IBM DB2 9.1 prior to FP10, 9.5 prior to FP7, and 9.7 prior to FP3 running on Linux, UNIX, and Windows. The flaw allows a remote attacker to execute arbitrary code or ...

iOS Impact PDF Reader 2.0 - POST Method Remote Denial of Service

Exploit: Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/impact-pdf-reader/id322140783?mt=8 Version: 2.0, 1.2 Tested on: iPod 2G with iOS...

Safari On iPhone / iPod Touch Denial Of Service

Exploit Title: Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An attacker may direct the user to visit ...

Safari for iPhone & iPod Touch Bad "VML" Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================================= Safari for iPhone & iPod Touch Bad "VML" Remote Denial of Service Exploit ========================================================================= Exploit Title: Bad "VML...

Unfixed XSS vulnerability at www.drivehq.com

Security researcher Nishant Das Patnaik, has submitted on 30/01/2010 a cross-site-scripting XSS vulnerability affecting www.drivehq.com, which at the time of submission ranked 36709 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2010. It...

IBM Db2 Multiple Vulnerabilities - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM DB2 Multiple Vulnerabilities (Windows)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

CVE-2009-2859

IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command...

Command injection

IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command...

CVE-2009-2859

IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command...

CVE-2009-2859

CVE-2009-2859 affects IBM DB2 8.1 before FP18. A local attacker could gain unspecified access via a DAS command, potentially elevating privileges. Public reports in the connected docs corroborate that the issue is tied to the DB2 DAS mechanism and local access vectors; the exact exploit details a...