7499 matches found
CVE-2010-2812
Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service exception and daemon crash via a PING command that lacks an argument...
SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS
Exploit for windows platform in category dos / poc ================================================================ SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS ================================================================ Vendor: SmartCode Solutions Product Web Page:...
Microsoft Office Word sprmCMajority Record Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must open a malicious document. The specific flaw exists in the parsing of sprmCMajority records...
MDVA-2010:005 : msec
This update fixes two issues with msec: - some error messages could result in msec trowing an exception instead of logging the corresponding text bug 56180 - security report about group-writable files belonging to gdm user was silenced by default bug 56064 %NASLMINLEVEL 70300 @DEPRECATED@ This...
NullPointerException when there are no cookies and AccessLogRequestInfo is enabled
When using the filter-list and project-list plugins I ran into an issue where NullPointerExceptions were being thrown. I turned out the issue is in AccessLogRequestInfo when the Cookie header doesn't exists. The line that causes the exception is a log.debug line. I am including a patch that check...
NullPointerException when there are no cookies and AccessLogRequestInfo is enabled
When using the filter-list and project-list plugins I ran into an issue where NullPointerExceptions were being thrown. I turned out the issue is in AccessLogRequestInfo when the Cookie header doesn't exists. The line that causes the exception is a log.debug line. I am including a patch that check...
cmd.exe Unicode Buffer Overflow (SEH)
No description provided by source. Exploit Title: cmd.exe Unicode Buffer Overflow SEH Date: 7/8/2010 Author: bitform Software Link: N/A Version: N/A Tested on: Windows Server 2003 SP2 and Windows XP SP2 CVE : none 1 Acknowledgements Props to Dan Crowley @dancrowley at Core Security Technologies f...
IBM WebSphere Application Server 7.0 < Fix Pack 11 Multiple Vulnerabilities
IBM WebSphere Application Server 7.0 before Fix Pack 11 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - WS-Security processing problems with PKIPath and PKCS7 tokens could lead to a security bypass vulnerability. PK96427 - An...
CA BrightStor Universal Agent - Remote Overflow (Metasploit)
$Id: universalagent.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler (SEH)
--------------------------------------------- Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler SEH Date: 25.05.2010 --------------------------------------------- - Description Webby is a small webserver for the windows operating system. - buffer...
Webby Webserver 1.01 Buffer Overflow
--------------------------------------------- Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler SEH Date: 25.05.2010 --------------------------------------------- - Description Webby is a small webserver for the windows operating system. - buffer...
Firefox 3.6.3 & Safari 4.0.5 - Access Violation Exception and Unknown Exception
No description provided by source. !-- By: Fredrik Nordberg Almroth URL: http://h.ackack.net/ -- script var...
Firefox 3.6.3 & Safari 4.0.5 Access Violation / Unknown Exception
Exploit for windows platform in category dos / poc var...
Mozilla Firefox 3.6.3 Safari 4.0.5 - Access Violation Exception and Unknown Exception
Mozilla Firefox 3.6.3 Safari 4.0.5 - Access Violation Exception and Unknown Exception var...
Mozilla Firefox 3.6.3 / Safari 4.0.5 - Access Violation Exception and Unknown Exception
var a=String.fromCharCode60,115,99,114,105,112,116,62,118,97,114,32,97,61,34,60,109,97,114,113,117,101,101,62,97,34,59,119,104,105,108,101,40,49,41,123,97,61,97,43,97,59,100,111,99,117,109,101,110,116,46,119,114,105,116,101,40,97,41,59,125,60,47,115,99,114,105,112,116,62; while1 a=a+a;...
CVE-2010-0810
The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service reboot via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."...
CVE-2010-0810
CVE-2010-0810 corresponds to the Windows kernel exception handler vulnerability. Affected products per connected data: Windows Vista (Gold), SP1 and SP2, and Windows Server 2008 (Gold and SP2). Root cause: improper handling of certain exceptions in the Windows kernel, leading to a denial-of-servi...
PT-2010-2538 · Microsoft · Windows Vista +2
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions Gold, SP1, and SP2 Microsoft Windows Server 2008 versions Gold and SP2 Description: A denial of service issue exists due to improper handling of exceptions by the kernel. This allows local users to cause a...
Microsoft Windows Kernel Exception Handling Local Denial Of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers can exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Technologies Affected Avaya Meeting Exchange -...
IncrediMail 2.0 ActiveX (Authenticate) bof PoC
Exploit for windows platform in category dos / poc ============================================== IncrediMail 2.0 ActiveX Authenticate bof PoC ============================================== IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor...