PT-2009-2915 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue allows attackers to execute arbitrary code through various means, including inserting CD-ROM or DVD media, connecting a USB or Firewire device, mapping a network drive, ...

CVE-2009-0243: Undefined Security Weakness

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability

Overview The HDL-F series products from I-O DATA DEVICE, INC. are LAN connectable hard disk drives. The web interface for administration in the products contains a cross-site request forgery vulnerability. The HDL-F series products provided by I-O DATA DEVICE, INC. are LAN connectable hard disk...

On Tumblr hung it to the principle-vulnerability warning-the black bar safety net

Today I come to tell you to talk about it on the QQ space hung it works, I tried it, the success rate account for 8 0 percent. There are a lot of people have asked me what can be done in broiler flocks, I think for a long time, but the QQ space to hang horse can achieve this. So I try to do it,...

Trac quickjump Search Script q Parameter Arbitrary Site Redirect

The remote host is running Trac, an enhanced wiki and issue tracking system for software development projects. The version of Trac installed on the remote host fails to sanitize user input to the 'q' parameter of the 'search' script before using it in an unfiltered and unmanaged fashion in a...

qemu/kvm/xen: qemu block format auto-detection vulnerability

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

DEBIAN-CVE-2008-2004

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

CVE-2008-0708

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...

Default credentials

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...

CVE-2008-0708

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...

CVE-2008-0708

CVE-2008-0708 relates to HP USB 2.0 Floppy Drive Key options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers, where worms W32.Fakerecy and W32.SillyFDC may be launched if the server lacks up-to-date detection. The connected documents confirm the affected products and the malware...

CVE-2008-0708: Undefined Security Weakness

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...

ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod

suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings","Fade","White" ---- some wiresh...

ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC

Exploit for unknown platform in category remote exploits =============================================================== ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC ===============================================================...

CVE-2003-1521

Sun Java Plug-In 1.4 through 1.4.202 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model...

CVE-2003-1521

CVE-2003-1521 affects Sun Java Plug-In 1.4–1.4.2_02. The issue enables remote attackers to repeatedly access the floppy drive via createXmlDocument in the org.apache.crimson.tree.XmlDocument class, violating the Java security model. The connected Red Hat and CVE records confirm the same descripti...

CVE-2003-1521: Undefined Security Weakness

Sun Java Plug-In 1.4 through 1.4.202 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model...

Remote Memory Read in Diskeeper 9 - 2007

Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...

Blasting mobile hard drive encryption program-vulnerability warning-the black bar safety net

Recently have a friend who found me said that his mobile hard disk some important files encrypted 暿 play�� ?? But now their forgotten when the beginning of the password, inside things can not see. He told me a simple description of the mobile encryption tools ? 褵 message 鳒? “Whether it's mobile o...

CREDANT Mobile Guardian Shield fails to remove credentials from memory

Overview CREDANT Mobile Guardian Shield fails to properly remove credentials from memory, which may allow an attacker to obtain access to the Windows domain and encrypted drive contents. Description CREDANT Mobile Guardian CMG Shield is a component of Mobile Guardian Enterprise Edition. CMG Shiel...