9561 matches found
[DCA-2011-0010] TOTVS Microsiga Protheus ERP - Memory Corruption
DCA-2011-0010 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Application Server Vendor Product Description - Software de Gesto - TOTVS - TOTVS is a software company, innovation, relationship and support management, the...
PT-2011-1062 · Suse +2 · Ext4Dev-Kmp-Trace +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the Generic Receive Offload GRO implementation in the Linux kernel. A problem in the napi reuse skb function in net/core/dev.c does not reset the values of certain...
WordPress Placester 0.1.0 Cross Site Scripting
------------------------------------------------------------------------ Software................WordPress Placester 0.1.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.wordpress-plugin.org/plugin/placester-plugin/...
jHTTPd 0.1a Directory Traversal Vulnerability
Exploit for multiple platform in category remote exploits ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5...
jHTTPd 0.1a Directory Traversal Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery...
wodWebServer.NET <= 1.3.3 Directory Traversal Vulnerability - Active Check
A directory traversal vulnerability in wodWebServer.NET can be exploited to read files outside of the web root. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FengOffice 1.7.4 Shell Upload
------------------------------------------------------------------------ Software................FengOffice 1.7.4 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.fengoffice.com Vendor Contact Date.....3/11/2011 Disclosure...
Spacenuke v3.2.5 => Persistent XSS Exploiable Vulnerability
Exploit for php platform in category web applications Spacenuke v3.2.5 = Persistent XSS Exploiable Vulnerability ----------------------------------------------------------- I MEMBER FROM IN3CT0R TEAM. 1337 DAY .. My + Author : KnocKout Contact : email protected E-Mail : email protected HomePage :...
VLC Vulnerabilities handling .AMV and .NSV files
Core Security Technologies - Corelabs Advisory VLC Vulnerabilities handling .AMV and .NSV files 1. Advisory Information Title: VLC Vulnerabilities handling .AMV and .NSV files Advisory ID: CORE-2011-0208 Advisory URL: http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files Date...
NSOADV-2011-003: Majordomo2 'help' Command Directory Traversal (Patch Bypass)
-------------------------- NSOADV-2011-003 --------------------------- Majordomo2 'help' Command Directory Traversal Patch Bypass 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1...
FreeBSD : asterisk -- Exploitable Stack and Heap Array Overflows (65d16342-3ec8-11e0-9df7-001c42d23634)
The Asterisk Development Team reports : The releases of Asterisk 1.4.39.2, 1.6.1.22, 1.6.2.16.2, and 1.8.2.4 resolve an issue that when decoding UDPTL packets, multiple heap based arrays can be made to overflow by specially crafted packets. Systems configured for T.38 pass through or termination...
kernel: possible kernel oops from user MSS
The dotcpsetsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCPMAXSEG aka MSS values, which allows local users to cause a denial of service OOPS via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect u...
Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection
Exploit for php platform in category web applications + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor: http://www.woltlab.com/de/ + Vulnerability hilfsmittel.php?action=read&katid= + Exploitab...
Woltlab Burning Board 2.3.6 Addon - hilfsmittel.php SQL Injection
Woltlab Burning Board 2.3.6 Addon - hilfsmittel.php SQL Injection Woltlab Burning Board 2.3.6 Addon hilfsmittel.php SQL Injection Vulnerability + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor:...
Majordomo2 - SMTPHTTP Directory Traversal
Majordomo2 - SMTPHTTP Directory Traversal Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google...
Majordomo2 - Directory Traversal (SMTP/HTTP)
Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Special thanks to Dave Miller, Reed Loden and the rest...
Majordomo2 - Directory Traversal (SMTP/HTTP)
Exploit for multiple platform in category remote exploits Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google dork:inurl:mjwwwusr Special thanks to Dave...
Majordomo2 - 'SMTP/HTTP' Directory Traversal
Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google dork:inurl:mjwwwusr Special thanks to Dave...
AzeoTech DAQFactory Networking Vulnerabilities
Overview ICS-CERT Advisory ICSA-11-122-01 was originally released to the US-CERT Portal on May 24, 2011. This web site release was delayed to allow users sufficient time to download and install the upgrade. ICS-CERT received a report from the nSense Vulnerability Coordination Team concerning...
Majordomo2 20110121 Directory Traversal
Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Download:...