6932 matches found
Firefox 3.6 < 3.6.12 Buffer Overflow
The installed version of Firefox 3.6 is earlier than 3.6.12. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...
SeaMonkey < 2.0.10 Buffer Overflow
The installed version of SeaMonkey is earlier than 2.0.10. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...
Firefox < 3.5.15 Buffer Overflow
The installed version of Firefox is earlier than 3.5.15. Such versions are potentially affected by a heap-based buffer overflow vulnerability. The combination of DOM insertions and the handling of the JavaScript function 'document.write' exposes an error that can lead to a heap-based buffer...
CVE-2010-3856
creationtimestamp| type| source ---|---|--- 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15304 2011-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18105 2018-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44025 2018-05-29...
EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC
Exploit for windows platform in category dos / poc ====================================================== EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC ====================================================== sub banner print q PoC EasyFTP 1.7.0.X Crash Author: Inj3cti0n P4ck3t e-mail:...
CVE-2010-3847
creationtimestamp| type| source ---|---|--- 2010-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15274 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15304 2018-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44025 2018-02-12...
Daemon Tools Lite 4.30.4.0027 DLL Hijacking Exploit
Exploit for windows platform in category local exploits =================================================== Daemon Tools Lite 4.30.4.0027 DLL Hijacking Exploit =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /...
Code injection
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...
Flash: crash or potential arbitrary code execution (APSB10-22)
Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary...
Joomla TimeTrack 1.2.4 SQL Injection
TimeTrack 1.2.4 Joomla Component Multiple SQL Injection Vulnerabilities Name TimeTrack Vendor http://www.itrn.de Versions Affected 1.2.4 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-09-22 X. INDEX I. ABOUT THE...
CVE-2010-2884
Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary...
Memory corruption
Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary...
CVE-2010-2884
Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary...
Adobe Warns of Flash Player Zero-Day Attack
The zero-day hacker attacks against Adobe’s software products are coming fast and furious. Less than a week after the discovery of a sophisticated malware attack against an unpatched security hole in Adobe Reader/Acrobat, the company has issued a new warning for in-the-wild attacks against a...
Stack overflow
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...
CVE-2010-2883
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...
New Adobe PDF Zero-Day Flaw Under Attack
Adobe today sounded an alarm for a new zero-day flaw in its PDF Reader/Acrobat software, warning that hackers are actively exploiting the vulnerability in-the-wild. Details on the vulnerability are not yet public but the sudden warning from Adobe is a sure sign that rigged PDF documents are being...
Cable Modem Termination System Authentication Bypass - Cisco Systems
Two issues are described in this security advisory. The first issue involves cable modems not manufactured by Cisco that allow a configuration file to be downloaded from an interface that is not connected to the network of the cable modem's service provider. This historical behavior allows an...
Secunia Research: Opera "Download" Dialog File Execution Security Issue
====================================================================== Secunia Research 12/08/2010 - Opera "Download" Dialog File Execution Security Issue - ====================================================================== Table of Contents Affected...
Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENWorks Remote Management. Access to a single node with Remote Management client installed and configured is required. The specific flaw exists within the storage of Remote Management...