MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

No description provided by source. /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with...

FUN labs Game Engine Multiple Remote Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12862/info Multiple FUN labs games are affected by remote denial of service vulnerabilities. A remote attacker can cause a game server to stop responding by sending an empty UDP packet. Another vulnerability can allow a...

IRCnet IRCD 2.10 Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of...

PostgreSQL <= 8.4.1 JOIN Hashtable Size Integer Overflow Vulnerability

Exploit for multiple platform in category dos / poc PostgreSQL is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied data before using it in memory-allocation calculations. An attacker can exploit this issue to cause the affected application to...

[oss-security] Unsafe Query Risk in Active Record

This advisory concerns a security risk in all supported versions of Active Record. There is no patch to apply for this issue. Due to the query API that Active Record supports, there is a risk of unsafe query generation in two scenarios. Databases with a table that contains a column with the same...

MariaDB多个拒绝服务漏洞

MariaDB基于事务的Maria存储引擎，替换了MySQL的MyISAM存储引擎，它使用了Percona的 XtraDB，InnoDB的变体，分支的开发者希望提供访问即将到来的MySQL 5.4 InnoDB性能。 1），当处理某些编写有子查询的SELECT语句时的空指针引用错误，可以被利用来导致系统崩溃。 成功利用此漏洞，需要在"materialization"和"semijoin"优化切换到打开时。 2） 处理有某些并发的SQL查询的KILL查询语句时的错误，可被利用来导致系统崩溃。 3）分析NAMECONST表达式时包含AND/OR表达式，可以被利用来导致系统崩溃。...

MariaDB Server 5.5.x < 5.5.36 Remote Multiple Denial of Service Vulnerabilities

Binary data 8132.prm...

Cisco WebEx Meetings Server Unauthorized Meeting Actions Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attackers to join meetings they have not been authorized to attend or to end meetings for which they are not the host. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...

samba security, bug fix, and enhancement update

3.6.9-164 - resolves: 1008574 - Fix offline logon cache not updating for cross child domain group membership. 3.6.9-163 - resolves: 1015359 - Fix CVE-2013-0213 and CVE-2013-0214 in SWAT. 3.6.9-162 - resolves: 978007 - Fix 'valid users' manpage documentation. 3.6.9-161 - resolves: 997338 - Fix...

CVE-2013-0223

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function...

CVE-2013-0223: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function...

coreutils: segfault in "join -i" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function...

Juniper Networks Junos OS PIM Join Flooding Denial of Service Vulnerability

A large number of crafted PIM join messages can crash the RPD routing daemon. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LinkedIn Join Group Cross Site Request Forgery

============================================= INTERNET SECURITY AUDITORS ALERT 2013-016 - Original release date: June 8th, 2013 - Last revised: July 11th, 2013 - Discovered by: Eduardo Garcia Melia - Severity: 4.3/10 CVSSv2 Base Score ============================================= I. VULNERABILITY...

Input validation

Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN NGEN MVPN environment, allows remote attackers to cause a denial of service RPD routing daemon crash via a large number of crafted PIM S,G...

CVE-2013-6170

Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN NGEN MVPN environment, allows remote attackers to cause a denial of service RPD routing daemon crash via a large number of crafted PIM S,G...

CVE-2013-6170: Improper Input Validation

Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN NGEN MVPN environment, allows remote attackers to cause a denial of service RPD routing daemon crash via a large number of crafted PIM S,G...

SuSE 11.2 / 11.3 Security Update : coreutils (SAT Patch Numbers 8334 / 8336)

This coreutils update fixes three minor security issues : - VUL-1: CVE-2013-0221: segmentation fault in 'sort -d' and 'sort -M' with long line input. bnc798538 - VUL-1: CVE-2013-0222: segmentation fault in 'uniq' with long line input. bnc796243 - VUL-1: CVE-2013-0223: segmentation fault in 'join...

Hardcoded credentials

Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this password in the source code and then sending the password in a Hazelcast cluster API call, a different...

Mandriva Linux Security Advisory : coreutils (MDVSA-2013:023-1)

Multiple vulnerabilities has been found and corrected in coreutils : Long line inputs could trigger a segfault in the sort, uniq and join utilities CVE-2013-0221, CVE-2013-0222, CVE-2013-0223. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network...