Oracle Document Capture ImportBodyText — read files

Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL: Oracle Bugs: Unsecure READ method Exploits: YES Reported: 29.01.2010 Second report: 02.02.2010 Date of Public Advisory: 24.01.2010 CVE-number:CVE-2010-3595 Author: Alexey Sintsov Description EasyMail ActiveX Control...

Safari 4.0.4 Crash

No description provided by source. The following piece of javascript will crash Safari nicely when triggered using one \ of the methods described below. With my limited knowledge I am unable to tell if \ it's exploitable or not. I therefore turn it over to "the internet". tested on \ Safari 4.0.4...

[CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Google SketchUp 'lib3ds' 3DS Importer Memory Corruption 1. Advisory Information Title: Google SketchUp 'lib3ds' 3DS Importer Memory Corruption Advisory Id:...

Testlink TestManagement And Execution System Cross Site Scripting

1.Title :Cross site scriping Vulnerabilites in Testlink TestManagement and Execution System. Discovered by: Prashant Khandelwal [email protected] 2.Vulnerability Information Class: Cross site scriping Impact :Code execution Remotely Exploitable: Yes Locally Exploitable: No 3. Vulnerable...

Testlink TestManagement And Execution System Directory Traversal

1.Title :Multiple Directory traversal Vulnerabilites in Testlink Test Management and Execution System. Discovered by: Prashant Khandelwal [email protected] 2.Vulnerability Information Class: Directory Traversal Remotely Exploitable: Yes Locally Exploitable: No 3.Vulnerable packages. Version...

Google SketchUp 'lib3ds' 3DS Importer Memory Corruption

Advisory ID Internal CORE-2009-1209 1. Advisory Information Title: Google SketchUp 'lib3ds' 3DS Importer Memory Corruption Advisory Id: CORE-2009-1209 Advisory URL:www.coresecurity.com/core-labs/advisories/google-sketchup-vulnerability Date published: 2010-01-13 Date of last update: 2010-01-12...

iOS Udisk FTP Basic Edition - Remote Denial of Service

!/usr/bin/python Apple Iphone/Ipod - Udisk FTP Basic Edition Remote 0day DOS exploit Found by: Steven Seeley mrme seeleymagic at hotmail dot com Homepage: http://6tags.com/n/ Price: $4.99 Download: From the app store use your itunes account Tested on: Iphone 3G - firmware 3.1.2 Darwin kernel Gree...

Qemu and KVM VNC server remote DoS

Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL: Date published: 2009-12-22 Date of last update: 2008-12-19 Vendors contacted: Qemu and KVM teams Release mode: Coordinated release 2. Vulnerability...

Fedora 12 : drupal-6.15-1.fc12 (2009-13291)

Advisory ID: DRUPAL-SA-CORE-2009-009 Project: Drupal core Version: 5.x, 6.x Date: 2009-December-16 Security risk: Not critical Exploitable from: Remote Vulnerability: Cross site scripting -------- DESCRIPTION -------------------------------------------------------- - Multiple vulnerabilities were...

CORE-2009-0911: DAZ Studio Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ DAZ Studio Arbitrary Command Execution 1. Advisory Information Title: DAZ Studio Arbitrary Command Execution Advisory Id: CORE-2009-0911 Advisory URL:...

Autodesk Maya Script Nodes Arbitrary Command Execution

Advisory ID Internal CORE-2009-0910 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-0910 Advisory URL:http://www.coresecurity.com/content/maya-arbitrary-command-execution Date published: 2009-11-23 Date of last update: 2009-11-20 Vendor...

Autodesk 3DS Max Application Callbacks Arbitrary Command Execution

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk 3DS Max Application Callbacks Arbitrary Command Execution 1. Advisory Information Title: Autodesk 3DS Max Application...

Autodesk SoftImage Scene TOC - Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk SoftImage Scene TOC Arbitrary Command Execution 1. Advisory Information Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution Advisory Id:...

Fedora 10 : wordpress-2.8.6-2.fc10 (2009-11687)

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended. Note that Tenable Network Security has extracted the preceding description block directly from the...

Core Security Technologies Advisory 2009.0814

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openview NNM 7.53 Invalid DB Error Code vulnerability Advisory Id:...

IBM SolidDB - Invalid Error Code

IBM SolidDB - Invalid Error Code 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL: http://www.coresecurity.com/content/ibm-soliddb-errorcode-dos Date published: 2009-11-18 Date of last update: 2009-11-18 Vendors contacted: IBM...

IBM SolidDB - Invalid Error Code

Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL: http://www.coresecurity.com/content/ibm-soliddb-errorcode-dos Date published: 2009-11-18 Date of last update: 2009-11-18 Vendors contacted: IBM Release mode: Forced release 2...

CORE-2009-0814: HP Openview NNM 7.53 Invalid DB Error Code vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openview NNM 7.53 Invalid DB Error Code vulnerability Advisory Id:...

HP OpenView Network Node Manager (OV NNM) 7.53 - Invalid DB Error Code

HP OpenView Network Node Manager OV NNM 7.53 - Invalid DB Error Code -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openvi...

HP Openview NNM 7.53 Invalid DB Error Code Vulnerability

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openview NNM 7.53 Invalid DB Error Code...