PT-2010-3823 · Linux +1 · Generic Scsi Target Subsystem For Linux +2

Name of the Vulnerable Software and Affected Versions: Linux SCSI target framework versions prior to 1.0.6 iSCSI Enterprise Target versions prior to 1.4.20.1 Generic SCSI Target Subsystem for Linux versions prior to 1.0.1.1 Description: The issue is related to multiple buffer overflows in the iSN...

CVE-2010-2221: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or scsi-target-utils before 1.0.6, 2 iSCSI Enterprise Target aka iscsitarget or IET 1.4.20.1 and earlier, and 3 Generic SCSI Target Subsystem for Linux aka SCST or iscsi-scst 1.0.1.1 and earlie...

CVE-2010-2221

Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or scsi-target-utils before 1.0.6, 2 iSCSI Enterprise Target aka iscsitarget or IET 1.4.20.1 and earlier, and 3 Generic SCSI Target Subsystem for Linux aka SCST or iscsi-scst 1.0.1.1 and earlie...

DEBIAN-CVE-2010-1321

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...

DNS Generic Query Detection

Binary data 5498.prm...

CVE-2010-0167

The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service memory corruption and application crash and possibly execute arbitrary code via vectors...

CGI Generic Tests HTTP Errors

Nessus ran into trouble while running its generic CGI tests against the remote web server for example, connection refused, timeout, etc. When this happens, Nessus aborts the current test and switches to the next CGI script on the same port or to another web server. Thus, test results may be...

CGI Generic Command Execution

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Linux Kernel 2.6.27-7-generic Denial Of Service

/ Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Dos Exploit ariginal idéé : Jon Oberheide łł http://www.milw0rm.com/exploits/7405 tested : 2.6.27.7-generic - 2.6.18 - 2.6.24-1 by : ADU-T patching : http://marc.info/?l=linux-netdev&m=122841256115780&w=2 / include include include include includ...

Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Local DoS Exploit

No description provided by source. / Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Dos Exploit ariginal idéé : Jon Oberheide łł http://www.milw0rm.com/exploits/7405 tested : 2.6.27.7-generic - 2.6.18 - 2.6.24-1 by : ADU-T patching : http://marc.info/?l=linux-netdev&m=122841256115780&w=2 /...

Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Local DoS Exploit

Exploit for linux platform in category dos / poc =================================================================== Linux Kernel 2.6.27.7-generic - 2.6.18 - 2.6.24-1 Local DoS Exploit =================================================================== / Linux Kernel 2.6.27.7-generic - 2.6.18 -...

CVE-2008-5186

The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...

PT-2008-6329 · Nigel Mcnie · Geshi

Name of the Vulnerable Software and Affected Versions: Generic Syntax Highlighter GeSHi versions prior to 1.0.8.1 Description: The set language path function in geshi.php might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $pa...

CVE-2008-5186: Improper Input Validation

The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...

CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash

CUPS 1.3.7 - Cross-Site Request Forgery Add RSS Subscription Remote Crash // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CUPS daemon to crash // by Adrian 'pagvac' Pastor | GNUCITIZEN.org forvar i=1;i"; / TESTED ON: Ubuntu 8.04.1 fully patched as of 19th Oct 2008 Linux...

Design/Logic Flaw

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3436

Notepad++ prior to 4.8.1 is affected by CVE-2008-3436 through its GUP generic update process, which does not properly verify update authenticity. This enables MITM attackers to deliver arbitrary code via a Trojan-horse update, as demonstrated by evilgrade and DNS cache poisoning. The provided con...

CVE-2008-3436: Improper Control of Generation of Code

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Windows Command, Generic Command Execution

Executes the supplied command This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 8 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def initializeinfo =...

CVE-2008-2218: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server MCS before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service crash via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of servic...