SuSE 11.1 Security Update : moonlight (SAT Patch Number 4246)

Moonlight was prone to several security problems : - modification of read-only values via RuntimeHelpers.InitializeArray. CVE-2011-0989 - buffer overflow due to race condition in in Array.FastCopy. CVE-2011-0990 - use-after-free due to DynamicMethod resurrection. CVE-2011-0991 - information leak...

RealNetworks, Inc. Releases Update for Helix Server and Helix Mobile Server

RealNetworks, Inc. has released a security update for multiple vulnerabilities affecting Helix Server and Helix Mobile Server. The vulnerabilities affect versions 12.x, 13.x, and 14.x of Helix Server and Helix Mobile Server installed on Red Hat Enterprise Linux 5, Sun Solaris 10, Windows 2003, an...

Fedora 15 : subversion-1.6.16-1.fc15 (2011-3775)

A NULL pointer dereference flaw was found in the way the moddavsvn module processed certain requests to lock working copy paths in a repository. A remote attacker could issue a lock request that could cause the httpd process serving the request to crash. CVE-2011-0715 The Fedora Project would lik...

NGS00016 Technical Advisory: Immunity Debugger Buffer Overflow

======= Summary ======= Name: Immunity Debugger Buffer Overflow Release Date: 22 March 2011 Reference: NGS00016 Discoverer: Paul Harrington Vendor: Immunity Inc Vendor Reference: Support 3171 Systems Affected: Windows Risk: Low Status: Fixed ======== TimeLine ======== Discovered: 28 October 2010...

OnePlug CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : OnePlug CMS Vulnerable to Multiple SQL Injection Vendor: http://www.webpromo-inc.com/ Found by : p0pc0rn Dork : intext:"Powered by OnePlug CMS" SQL - Microsoft Access ------------------------------- Parameters index.asp?TeamID=SQL...

VMware vCenter Orchestrator and Alive Enterprise remote code execution vulnerability

a. Vulnerability in third party Apache Struts componentVMware vCenter Orchestrator is an application to automate management tasks. Alive Enterprise is an application to monitor processes. Both products embed Apache Struts which is a third party component.The following vulnerability has been...

VMSA-2011-0005:VMware vCenter Orchestrator and Alive Enterprise remote code execution vulnerability

VMSA-2011-0005.3 VMware vCenter Orchestrator and Alive Enterprise remote code execution vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0005.3 VMware Security Advisory Synopsis: VMware vCenter Orchestrator and Alive Enterprise remote code execution...

QuickTime Player v 7.5.x (m3u) Stack Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Title : QuickTime Player v 7.5.x m3u Stack Buffer Overflow Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Remote...

Gentoo Security Advisory GLSA 201101-09 (adobe-flash)

The remote host is missing updates announced in advisory GLSA 201101-09. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201006-14 (newt)

The remote host is missing updates announced in advisory GLSA 201006-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

STARTTLS plaintext command injection vulnerability

Overview Some STARTTLS implementations could allow a remote attacker to inject commands during the plaintext phase of the protocol. Description STARTTLS is an extension to plaintext communication protocols that offers a way to upgrade a plaintext connection to an encrypted TLS or SSL connection...

Debian Security Advisory DSA 2122-2 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 2122-2. OpenVAS Vulnerability Test $Id: deb21222.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2122-2 glibc Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FeiXun enterprise website management system v2011 upload vulnerabilities pass to kill 0day-vulnerability warning-the black bar safety net

Affected version: v2011 Official website: http://www.webhtm.cn PRODUCT DESCRIPTION: Suitable Agent building a Business Site of the enterprise source code, The aspect of the practical! Program description: 1. Features: simplified and Traditional Chinese switch, the product display system, news...

SuSE 10 Security Update : IBM Java 1.6 (ZYPP Patch Number 7342)

Sun Java 1.6 was updated to Update 24 fixing various bugs and security issues. The update is rated critical by Sun. Following CVEs were addressed : CVE-2010-4452 / CVE-2010-4454 / CVE-2010-4462 / CVE-2010-4463 / CVE-2010-4465 / CVE-2010-4467 / CVE-2010-4469 / CVE-2010-4473 / CVE-2010-4422 /...

CMD CMS 1.4 SQL Injection

Exploit Title : CMD CMS v1.4 SQL Injection Vulnerability Author : ThunDEr HeaD Contact : [email protected] Date : 21-02-2011 HomePage : www.indishell.in Version : 1.4 , 2.0 Tested on : Balianti, Inc. Vulnerability Style : CMD CMS Sql Injection Vunerability...

Hacked security firm backs out of security conference !

It has really got to hurt when you run a computer security company and an outlaw hacker group manages to steal and post on the Internet embarrassing emails connecting you to much-publicized plans for crushing the enemies of large corporations through unsavory means like disinformation and...

Century Marketing Inc SQL Injection Vunerability

Exploit for php platform in category web applications + Exploit Title :Century Marketing Inc web development Firm Sql Injection Vulnerability Author : eXeSoul Contact : email protected Date : 16-02-2011 HomePage : www.indishell.in Version : all Tested on : windows/linux Vulnerability Style : PHP...

CVE-2010-4738

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to 1 multi/city.asp in the Multi Agent System and 2 resulttype.asp in the Single Agent System...

Sql injection

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to 1 multi/city.asp in the Multi Agent System and 2 resulttype.asp in the Single Agent System...

CVE-2010-4738

The CVE-2010-4738 entry applies to Rae Media INC Real Estate Single and Multi Agent System 3.0. The underlying issue is SQL injection in two web interfaces: multi/city.asp (Multi Agent System) and resulttype.asp (Single Agent System), exploitable via the probe parameter. This allows remote attack...