Kingsoft Antivirus 'KisKrnl.sys' Driver Denial of Service Vulnerability

This host is installed with Kingsoft Antivirus and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodkingsoftantivirusdosvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Kingsoft Antivirus 'KisKrnl.sys' Driver Denial of Service Vulnerability Authors: Sooraj KS...

Debian DSA-2154-1 : exim4 - privilege escalation

A design flaw CVE-2010-4345 in exim4 allowed the local Debian-exim user to obtain root privileges by specifying an alternate configuration file using the -C option or by using the macro override facility -D option. Unfortunately, fixing this vulnerability is not possible without some changes in...

Update Protection against Opera Browser Document Writing Uninitialized Memory Access

A ulnerability was reported in Opera web browser, a web browser and Internet suite developed by the Opera Software company. The vulnerability is due to an error while handling asynchronous modifications to an HTML document. A remote attacker can exploit this issue by convincing a target user to...

DSA-2154-1 exim4 - privilege escalation

Bulletin has no description...

JE Messenger 1.0 Arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Publishing author: Salvatore Fresta aka Drosophila Official website: joomlaextensions. co. in Vulnerability type: file upload Vulnerability Description: The program save the function in an error, the compose.php allows to registered users to upload with any file extension. For a valid file...

SuSE 11 Security Update : MySQL (SAT Patch Number 2317)

Updated MySQL packages fix the following bugs : - upstream 47320 - checking server certificates. CVE-2009-4028 - upstream 48291 - error handling in subqueries. CVE-2009-4019 - upstream 47780 - preserving nullvalue flag in GeomFromWKB. CVE-2009-4019 - upstream 39277 - symlink behaviour fixed...

Mozilla Fixes Site Error-Handling Bug

Mozilla has fixed a bug in the way that its Bugzilla Web site and others handled certain errors, which could have been exploited to execute a man-in-the-middle attack against an unsuspecting user. The bug was related to the way that the sites responded to certain requests from client machines whe...

Small FTPD Server Directory Traversal Vulnerability

The host is running Small FTPD Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbsmallftpdserverdirtravvun.nasl 5373 2017-02-20 16:27:48Z teissa $ Small FTPD Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbo...

MSSQL SQL Injection

Вывод ошибок. http://site.com/script.asp?id=5's Код: Microsoft OLE DB Provider for SQL Server error '80040e14' MicrosoftODBC SQL Server DriverSQL ServerUnclosed quotation mark after the character string '5's'. /file.asp, line 1000 Ошибки могут быть разные, в зависимости на чем обрабатывается mssq...

SuSE 10 Security Update : MySQL (ZYPP Patch Number 6899)

This update fixes various security issues bnc557669 : upstream 47320 - checking server certificates CVE-2009-4028 upstream 48291 - error handling in subqueries CVE-2009-4019 upstream 47780 - preserving nullvalue flag in GeomFromWKB CVE-2009-4019 upstream 39277 - symlink behaviour fixed...

Windows-Movie-Maker

The vulnerable part starts at “IsValidWMToolsStream” function. In this function new is used two times for allocating space. In both cases, values of Size needed for allocating memory is read from .mswmm file. Successfully exploiting this issue allows remote attackers to cause denial-of-service...

FTPx Corp FTP Explorer Directory Traversal Vulnerability

This host is installed with FTPx Corp FTP Explorer and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodftpexploredirtraversalvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ FTPx Corp FTP Explorer Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

MS win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks

Exploit for windows platform in category dos / poc ===================================================================== MS Windows win32k!xxxRealDrawMenuItem Missing HBITMAP Bounds Checks ===================================================================== Microsoft Windows...

rsaUnDumper[sql] – универсальный дампер SQL INJECTION

Версия 1.5 Нововведения по сравнению с версией 1.0: добавлена поддержка прокси http; socks4 и sokcs5 - с авторизацией возможно указывать приоритет для потоков фак по ним позже, щас можно почитать msdn теперь вы указываете не url, а HTTP запрос, т.е. есть возможность дампить sql inj с уюзвимым pos...

Double free

Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."...

CVE-2010-1889

Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."...

Mozilla Firefox出错消息脚本文件名信息泄露漏洞

BUGTRAQ ID: 41860 CVE ID: CVE-2010-2754 Firefox是一款流行的开源WEB浏览器。 Firefox中的脚本出错处理方式会显示错误的来源，其中可能包含有敏感信息。假设 http://SampleSite.com/admin.asp 页面使用了以下逻辑： 1- 如果用户没有登录，重新定向到登录页面。 2- 如果用户不是管理员，重新定向到拒绝访问页面。 3- 如果用户为管理员，显示管理员菜单。 攻击者可以使用跨站URL劫持技术确认用户在SampleSite.com所处的状态，并继续执行有针对性的攻击。 Mozilla Firefox 3.6.x...

Mozilla Cross-origin data leakage from script filename in error messages

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

MP3 Cutter 1.8 Crash Exploit

Exploit for windows platform in category dos / poc ============================ MP3 Cutter 1.8 Crash Exploit ============================ " Legion of Xtremers & Hackers Garage www.loxian.co.cc www.garage4hackers.com MP3 Cutter 1.8 Crash Exploit...

minerCPP 0.4b Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...