Design/Logic Flaw

The Ming Blacklist Free vc.software.blacklist application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack."...

CVE-2011-4705

CVE-2011-4705 affects the Ming Blacklist Free Android app, versions 1.8.1 and 1.9.2.1. The issue is an inadequate protection of data, enabling remote attackers to read or modify the app’s blacklists and a contacts list through a crafted application that triggers a “data-flow attack.” The availabl...

Cisco IOS dot1x端口处理多个远程拒绝服务漏洞

BUGTRAQ ID: 50375 CVE ID: CVE-2011-2057,CVE-2011-2058 Cisco的网际操作系统（IOS）是一个网际互连优化的复杂操作系统。数据流交互功能DLSw可以实现在IP网络上传输IBM SNA和网络BIOS流量。 Cisco IOS在处理dot1x端口时存在多个远程拒绝服务漏洞，可造成受影响设备停止响应，导致拒绝服务。 Cisco IOS 12.x 厂商补丁： Cisco ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cisco.com/warp/public/707/advisory.h...

Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability

Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability tested against: Microsoft Windows 2k3 r2 sp2 Oracle Hyperion Performance Management and BI v11.1.2.1.0 download url of the Oracle Hyperion suite:...

Ling animal flow companies web site the system fck exploit-vulnerability warning-the black bar safety net

Ling animal flow companies web site the system is a suitable for small and medium sized logistics company website system, fully functional Default background address:/Netsys/Default. asp default user name: admin default password: admin Use: google for: inurl:/page/ProductDetails. asp? PID=...

Mozilla Firefox OBJECT mObserverList Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Firefox's handli...

Microsoft IIS交换数据流绕过认证漏洞(MS10-065)

BUGTRAQ ID: 41314 CVE ID: CVE-2010-2731 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS没有正确地处理目录的基础认证，远程攻击者可以在请求的目录名后附加NTFS流名称和流类型（:$i30:$INDEXALLOCATION）绕过认证访问受保护的目录。 Microsoft IIS 5.1 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-065）以及相应补丁:...

Lithtech Engine - Memory Corruption

Lithtech Engine - Memory Corruption Original Advisory: http://aluigi.org/adv/fearless-adv.txt Luigi Auriemma Application: Lithtech engine http://www.lithtech.com Games: any game should be affected, refer to http://en.wikipedia.org/wiki/LithtechLithtechimplementations those personally tested by me...

WikiWebHelp 0.28 - SQL Injection

Version: v0.28 Possible all versions Vendor: Richard Bondi - http://wikiwebhelp.org Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip Description: "The goal of this project is to create a help application that is editable by the community. Standard wiki systems are great for many application...

BlazeDVD v6.0 Buffer Overflow Exploit (Meta)

Exploit for windows platform in category local exploits ============================================ BlazeDVD v6.0 Buffer Overflow Exploit Meta ============================================ This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

Microsoft Help Workshop HPJ OPTIONS Section Buffer Overflow (CVE-2007-0427)

The Microsoft Help Workshop product is a development tool that allows the design and development of help files frequently packaged with Windows based applications. The program is used to author help content and package it in Microsoft Help files such as HLP. There exists a buffer overflow...

Internet Explorer Tabular Data Control ActiveX Memory Corruption

$Id: ms10018ietabularactivex.rb 9018 2010-04-05 20:25:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Symantec AntiVirus Real Time Virus Scan Service Stack Overflow (CVE-2006-2630)

Symantec Antivirus Corporate Edition and Symantec Client Security are applications designed to protect organizations from the threat of viruses, malware, and intrusion attempts. Both applications can be deployed in an enterprise network environment, and they both support an anti-virus scanning...

RealNetworks RealPlayer Error Message Format String (CVE-2005-2710)

RealPlayer and Helix Player are media players developed by RealNetworks, Inc. These applications are capable of playing back numerous multimedia file formats. They support a streaming slide show technology called RealPix that allows for the creation of presentations that include image content. Th...

cyrus-imapd / Dovecot integer overflow

Integer overflow on SIEVE mail flow management scripts processing...

Mandriva Linux Security Advisory : gnutls (MDVSA-2008:227-1)

Martin von Gagern found a flow in how GnuTLS versions 1.2.4 up until 2.6.1 verified certificate chains provided by a server. A malicious server could use this flaw to spoof its identity by tricking client applications that used the GnuTLS library to trust invalid certificates CVE-2008-4989. Updat...

Mandriva Update for kernel MDKSA-2007:078 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:078 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

ICAP adaptation: missing data flow control to client side

Summary ======= squid proxys ICAP adaptation is missing data flow control to client side. Thus blocking clients may cause a denial of service condition when requesting huge downloads. Affected Versions ================= All squid 3.x versions Not vulnerable ============== None of phions HTTP prox...

Replay Attack Vulnerability in Tor (Linux)

This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnlin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Tor <= 0.2.0.34 Replay Attack Vulnerability - Linux

Tor Anonymity Proxy is prone to replay attack vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...