Adobe Flash 10.1 ActionScript AVM1 ActionPush vulnerability

Overview Adobe Flash contains a vulnerability in the handling of the ActionScript, AVM1 ActionPush command, which can allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash supports two main types of ActionScript, which is the scripting language for Flash...

Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control stack buffer overflow

Overview The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control contains a stack buffer overflow that could allow a remote attacker to execute arbitrary code on an affected system Description The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control,...

pam_captcha username harvest vulnerability

pamcaptcha is visual text-based CAPTCHA challenge module for PAM that uses figlet to generate the CAPTCHAs. Project site: http://www.semicomplete.com/projects/pamcaptcha/ A site with a screen shot: http://www.michaelboman.org/how-to/securing-ssh-access-with-pam-captcha I found a security problem...

linux/ARM - Disable ASLR Security - 102 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/ARM - Disable ASLR Security - 102 bytes ============================================= / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9...

Linux/ARM - Disable ASLR Security - 102 bytes

Linux/ARM - Disable ASLR Security - 102 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9 2.6.28-6-versatile Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of...

JavaScript Settings

The Content category contains an option to block annoying pop-up windows. Be sure to check that box. From this screen, you can disable specific JavaScript features by clicking on the Advanced button. See next screen...

Nakid CMS <= 0.5.2 RFI Vulnerability

Nakid CMS is prone to a remote file inclusion RFI vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Nakid CMS 'core[system_path]' Parameter Remote File Inclusion Vulnerability

This host is running Nakid CMS and is prone to remote file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodnakidcmsrfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Nakid CMS 'coresystempath' Parameter Remote File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2010...

firefox security, bug fix, and enhancement update

3.6.4-8.0.1.el4 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones 3.6.4-8.el4 - Update to 3.6.4 build 7 - Disable checking for updates since they can't be applied 3.6.4-7.el4 - Update to 3.6.4 build 6 3.6.4-6.el4 - Update to...

Rosoft Audio Converter '.M3U' file Buffer Overflow Vulnerability

This host is installed with Rosoft Audio Converter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrosoftaudioconverterbofvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Rosoft Audio Converter '.M3U' file Buffer Overflow Vulnerability Authors: Madhuri D Copyright...

CursorArts ZipWrangler 'ZIP Processing' Buffer Overflow Vulnerability

This host is installed with CursorArts ZipWrangler and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodcursorartszipwranglerbofvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ CursorArts ZipWrangler 'ZIP Processing' Buffer Overflow Vulnerability Authors: Madhuri D...

PT-2010-2539 · Microsoft · Activex +9

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 Developer Tools versions in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1...

Adobe Flash ActionScript AVM2 newfunction vulnerability

Overview Adobe Flash contains a vulnerability in the handling of the ActionScript newfunction instruction, which can allow a remote, unauthenticated attacker to execute arbitrary code. Description Adobe Flash 9 and later versions support ActionScript 3, which is executed by the ActionScript Virtu...

PT-2010-3699 · Python +1 · Python +1

Name of the Vulnerable Software and Affected Versions: Python versions 2.7 through 3.2 Description: The issue arises from the audioop module in Python not verifying the relationships between size arguments and byte string lengths. This allows context-dependent attackers to cause a denial of...

Linux/x86 - Disable randomize stack addresse - 106 bytes

Linux/x86 - Disable randomize stack addresse - 106 bytes. Shellcode exploit for linux platform / Title: Linux/x86 - Disable randomize stack addresse - 106 bytes Set randomizevaspace to zero Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Databas...

openMairie openPlanning Multiple File Inclusion Vulnerabilities

This host is running openMairie openPlanning and is prone to multiple file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenmairieopenplanningmultfileinclvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ openMairie openPlanning Multiple File Inclusion Vulnerabilities Authors: Madhuri D...

linux/x86 - Disable randomize stack addresse - 106 bytes

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 - Disable randomize stack addresse - 106 bytes ======================================================== / Title: Linux/x86 - Disable randomize stack addresse - 106 bytes Set...

CVE-2010-1547

Multiple cross-site request forgery CSRF vulnerabilities in the Chaos Tool Suite aka CTools module 6.x before 6.x-1.4 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable a page via a q=admin/build/pages/nojs/enable/ value or 2 disable a page...

SA-CONTRIB-2010-052 - Multiple vulnerabilities in multiple contributed modules

Versions affected and proposed solutions Private Message versions for the 5.x versions of Drupal The Privatemsg also known as Private Message module enables messages to be sent internally on a site. The module is vulnerable to cross-site request forgeries CSRF via it's message delete form. This...

Disable Third Party Browser Extensions

The Advanced tab contains settings that apply to all of the security zones. We recommend that you disable the Enable third-party browser extensions option. This option includes toolbars and Browser Helper Objects BHOs. While some add-ons can be useful, they also have the ability to violate your...