Touch22 Image22 ActiveX Control Buffer Overflow

Added: 09/13/2010 BID: 41547 Background Touch22 Software Image22 ActiveX enables dynamic graphic creation and image manipulation from within an application. Problem Touch22 Software Image22 ActiveX Control 1.1.1 is vulnerable to buffer overflow due to a boundary error when handling the function...

Adobe Captivate Insecure Library Loading Vulnerability

This host is installed with Adobe Captivate and is prone to Insecure Library Loading vulnerability. OpenVAS Vulnerability Test $Id: gbadobecaptivateinsecurelibloadvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Captivate Insecure Library Loading Vulnerability Authors: Sooraj KS Copyright:...

Cpanel PHP Restriction Bypass Vulnerability 0day

Exploit for php platform in category web applications ================================================ Cpanel PHP Restriction Bypass Vulnerability 0day ================================================ 1 Advisory information Title : Cpanel PHP Restriction Bypass Vulnerability Version : = 11.25...

Symantec Alert Management System Intel Alert Handler command execution

Added: 08/20/2010 BID: 41959 OSVDB: 66807 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on port...

Symantec Alert Management System Intel Alert Handler command execution

Added: 08/20/2010 BID: 41959 OSVDB: 66807 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on port...

JForum 2.08 Cross Site Scripting

Minded Security Labs: Advisory MSA130510 JForum ?s?i\color='"?.?^'"'"?.?/color\ $2 As it's possible to see from the previous code, "color" attribute expects a parameter between single quotes. Jforum does not encode single quotes, so it's possible to a...

Adobe Flash 10.1 ActionScript AVM1 ActionPush vulnerability

Overview Adobe Flash contains a vulnerability in the handling of the ActionScript, AVM1 ActionPush command, which can allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash supports two main types of ActionScript, which is the scripting language for Flash...

Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control stack buffer overflow

Overview The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control contains a stack buffer overflow that could allow a remote attacker to execute arbitrary code on an affected system Description The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control,...

pam_captcha username harvest vulnerability

pamcaptcha is visual text-based CAPTCHA challenge module for PAM that uses figlet to generate the CAPTCHAs. Project site: http://www.semicomplete.com/projects/pamcaptcha/ A site with a screen shot: http://www.michaelboman.org/how-to/securing-ssh-access-with-pam-captcha I found a security problem...

linux/ARM - Disable ASLR Security - 102 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/ARM - Disable ASLR Security - 102 bytes ============================================= / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9...

Linux/ARM - Disable ASLR Security - 102 bytes

Linux/ARM - Disable ASLR Security - 102 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9 2.6.28-6-versatile Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of...

JavaScript Settings

The Content category contains an option to block annoying pop-up windows. Be sure to check that box. From this screen, you can disable specific JavaScript features by clicking on the Advanced button. See next screen...

Nakid CMS <= 0.5.2 RFI Vulnerability

Nakid CMS is prone to a remote file inclusion RFI vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Nakid CMS 'core[system_path]' Parameter Remote File Inclusion Vulnerability

This host is running Nakid CMS and is prone to remote file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodnakidcmsrfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Nakid CMS 'coresystempath' Parameter Remote File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2010...

firefox security, bug fix, and enhancement update

3.6.4-8.0.1.el4 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones 3.6.4-8.el4 - Update to 3.6.4 build 7 - Disable checking for updates since they can't be applied 3.6.4-7.el4 - Update to 3.6.4 build 6 3.6.4-6.el4 - Update to...

Rosoft Audio Converter '.M3U' file Buffer Overflow Vulnerability

This host is installed with Rosoft Audio Converter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrosoftaudioconverterbofvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Rosoft Audio Converter '.M3U' file Buffer Overflow Vulnerability Authors: Madhuri D Copyright...

CursorArts ZipWrangler 'ZIP Processing' Buffer Overflow Vulnerability

This host is installed with CursorArts ZipWrangler and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodcursorartszipwranglerbofvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ CursorArts ZipWrangler 'ZIP Processing' Buffer Overflow Vulnerability Authors: Madhuri D...

PT-2010-2539 · Microsoft · Activex +9

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 Developer Tools versions in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1...

Adobe Flash ActionScript AVM2 newfunction vulnerability

Overview Adobe Flash contains a vulnerability in the handling of the ActionScript newfunction instruction, which can allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash 9 and later versions support ActionScript 3, which is executed by the ActionScript Virtu...

PT-2010-3699 · Python +1 · Python +1

Name of the Vulnerable Software and Affected Versions: Python versions 2.7 through 3.2 Description: The issue arises from the audioop module in Python not verifying the relationships between size arguments and byte string lengths. This allows context-dependent attackers to cause a denial of...