CVE-2009-3572

OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service kernel panic via unspecified vectors...

Core FTP LE 2.1 Buffer Overflow

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...

WS_FTP FTPD "STAT"command overflow parsing-vulnerability warning-the black bar safety net

The following analysis is based on the WSFTP Server 4.0.1. EVAL 4 7 1 5 6 3 1 4version, only the analysis of the“STAT”command overflow . In fact, WSFTP in processing STAT command, many places are length of the judgment, however, there is a place he has been missed, Well, our chance came.:...

CDBurnerXP 4.2.4.1351 - Local Crash (Denial of Service)

!/usr/bin/env python CDBurnerXP v 4.2.4.1351 Local Crash PoC Found By: DrIDE Tested On: XPSP3, 7RC Usage: Create New Data Disc, Add a Folder, Paste to Rename Folder, Click Save Compilation as ISO Notes: Super lame and most likely not exploitable. ''' Error Message: System.NullReferenceException:...

Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...

SuSE9 Security Update : bind (YOU Patch Number 12462)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if bind is master for a zone even if ddns is not configured CVE-2009-0696. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE 11 Security Update : bind (SAT Patch Number 1147)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured. CVE-2009-0696 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2009-2743

IBM WebSphere Application Server WAS 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure...

Cross site scripting

Cross-site scripting XSS vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages...

DEBIAN-CVE-2009-2947

Cross-site scripting XSS vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages...

CVE-2009-2947

Cross-site scripting XSS vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages...

CVE-2008-7227

Geoserver exposes a vulnerability CVE-2008-7227 in which PartialBufferOutputStream2 may flush buffer contents while handling an in-memory buffer, preventing service exceptions from being reported. Affected products are GeoServer prior to 1.6.1 and 1.7.0-beta1. The underlying cause is in PartialBu...

CVE-2008-7227

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...

cman security, bug fix, and enhancement update

2.0.115-1 - RSA II fencing agent has been fixed. - Resolves: rhbz493802 2.0.114-1 - local variable 'verbosefilename' referenced before assignment has been fixed - RSA II fencing agent has been fixed. - Resolves: rhbz493802 rhbz514758 2.0.113-1 - Limitations with 2-node fencescsi are now properly...

SuSE Security Advisory SUSE-SA:2009:040 (bind)

The remote host is missing updates announced in advisory SUSE-SA:2009:040. OpenVAS Vulnerability Test $Id: susesa2009040.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:040 bind Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

JDK DoS with crafted .jnlp file

The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service NullPointerException via a crafted .jnlp file, as demonstrated by the jnlpfile/appletDesc/index.htmlmisc test in the Technology Compatibility Kit TCK for the Java...

openSUSE Security Update : bind (bind-1146)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured CVE-2009-0696. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

WINMOD 1.4 (.lst) Local Stack Overflow Exploit XP SP3 (RET+SEH) #3

Exploit for unknown platform in category local exploits ================================================================== WINMOD 1.4 .lst Local Stack Overflow Exploit XP SP3 RET+SEH 3 ================================================================== Winmod 1.4 .lst Local Stack Overflow Exploit...

Real Helix DNA RTSP and SETUP Request Handler Vulnerabilities

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Real Helix DNA RTSP and SETUP request handler vulnerabilities 1. Advisory Information Title: Real Helix DNA RTSP and SETUP request...

Live For Speed 2 Version Z - .Mpr Local Buffer Overflow

Live For Speed 2 Version Z - .Mpr Local Buffer Overflow / Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit !! X version .mpr header specifications can be found at http://www.lfs.net/?page=MPR Version :Patch Z and all previous versions. Vendor :http://www.lfs.net/ Release date: July...