CVE-2011-1887

CVE-2011-1887 affects Microsoft Windows kernel-mode driver win32k.sys (Windows Vista SP1/SP2, Windows Server 2008 Gold SP2, R2 and R2 SP1, Windows 7 Gold/SP1). The vulnerability is a NULL pointer dereference in win32k.sys triggered by a crafted application, enabling local privilege escalation (hi...

Google Removes .CO.CC Subdomains Over Phishing, Spam Concerns

In a rare and sweeping move, Google has removed all of the sites hosted on .co.cc domains from its search results, saying that because such a large percentage of the sites on that freehosting provider are low-quality or spammy, they decided to de-index all of them. The .co.cc domain is well-known...

CVE-2011-1225

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

Null pointer dereference

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. OpenVAS Vulnerability Test $Id: secpodms11-034.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2506223 Authors: Veerendra GG Copyright: Copyright c...

MS11-034: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2506223)

The remote host is running a version of the Windows kernel that is affected by the following types of vulnerabilities : - Several use-after-free vulnerabilities exist due to the way that Windows kernel-mode drivers manage kernel-mode driver objects. CVE-2011-0662, CVE-2011-0665, CVE-2011-0666,...

Pligg CMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became...

Nokia N97 - '.m3u' Playlist Crash (PoC)

!/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested on : Nokia N97 v 22.0.110 Type RM-505...

GAzie 5.10 - Login Multiple Vulnerabilities

GAzie 5.10 - Login Multiple Vulnerabilities GAzie 5.10 Login parameter Multiple Remote Vulnerabilities Vendor: Antonio de Vincentiis Product web page: http://www.devincentiis.it, http://gazie.sourceforge.net Affected version: 5.10 Summary: GAzie is a multi-company management program ERP that runs...

GAzie 5.10 (Login parameter) Multiple Vulnerabilities

Exploit for php platform in category web applications GAzie 5.10 Login parameter Multiple Remote Vulnerabilities Vendor: Antonio de Vincentiis Product web page: http://www.devincentiis.it, http://gazie.sourceforge.net Affected version: 5.10 Summary: GAzie is a multi-company management program ERP...

GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities

Summary GAzie is a multi-company management program ERP that runs on Apache web server with support for PHP and Mysql database. Open Source web-based application for small and medium enterprises. Description GAzie is prone to a cross-site scripting and an SQL Injection vulnerability because it...

Unfixed XSS vulnerability at www.soldes-de-folie.com

Security researcher Xylitol, has submitted on 30/01/2011 a cross-site-scripting XSS vulnerability affecting www.soldes-de-folie.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/11/2011. It is...

Unfixed XSS vulnerability at www.bancodevenezuela.com

Security researcher Th3xin0x, has submitted on 28/01/2011 a cross-site-scripting XSS vulnerability affecting www.bancodevenezuela.com, which at the time of submission ranked 9812 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

SuSE 10 Security Update : Novell ipsec tools (ZYPP Patch Number 6306)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Unfixed XSS vulnerability at www.vvd.nl

Security researcher DexTeR, has submitted on 17/12/2010 a cross-site-scripting XSS vulnerability affecting www.vvd.nl, which at the time of submission ranked 485303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Unfixed XSS vulnerability at www2.nijmegen.nl

Security researcher DexTeR, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting www2.nijmegen.nl, which at the time of submission ranked 459541 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is current...

Unfixed XSS vulnerability at www.arnhem.nl

Security researcher DexTeR, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting www.arnhem.nl, which at the time of submission ranked 761734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Fedora 14 : xfig-3.2.5-25.b.fc14 (2010-18589)

Mon Dec 6 2010 Stanislav Ochotnicky - 3.2.5-25.b - Fix buffer overflow when opening malicious fig files - Thu Nov 25 2010 Hans de Goede 3.2.5-24.b - Fix importing of eps files 657290 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

CVE-2010-4248

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

SA-CONTRIB-2010-102 - Category tokens - Cross Site Scripting

The Category tokens module exposes additional tokens for the first and last terms related to a node for each vocabulary. The module does not sanitize the vocabulary names when displayed in token help, leading to a Cross-Site Scripting XSS vulnerability that may lead to a malicious user gaining fu...