PowerDVD 5.0.1107 - 'trigger.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44193/info PowerDVD is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

e2eSoft VCam - DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/44051/info e2eSoft VCam is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Novell iManager getMultiPartParameters file upload vulnerability

Added: 10/11/2010 BID: 43635 OSVDB: 68320 Background Novell iManager is a web-based management interface for other Novell products. Problem The getMultiPartParameters function in the nps.jar web application in Novell iManager allows remote attackers to upload arbitrary files to the server. By...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)

The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7101)

This update brings Mozilla Firefox to the 3.5.11 security release. It fixes following security issues : - Several memory safety bugs in habe been identified in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs show evidence of memory corruption under certain...

Microsoft Visio 2007 - 'mfc80esn.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43914/info Microsoft Visio is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that...

Novell iManager getMultiPartParameters Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iManager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nps.jar web application exposed via the Tomcat server running by default on TCP...

YelloSoft Pinky Directory Traversal Vulnerability

YelloSoft Pinky is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

E-Xoopport Samsara 3.1 (eCal Module) - Blind SQL Injection

!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; my $host = $ARGV0; my $usr = $ARGV1; my $pwd = $ARGV2; my $anickde = $ARGV3; my $anick = '0x'.EncHex$anickde; print "! Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd", op = "login" ; my $cookies = HTTP::Cookies-new autosave =...

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43414/info GreenBrowser is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

Sothink SWF Decompiler - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

/ source: https://www.securityfocus.com/bid/43417/info Sothink SWF Decompiler is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location tha...

Adobe On Location Insecure Library Loading Vulnerability (Windows)

This host is installed with Adobe On Location and is prone to insecure library loading vulnerability. OpenVAS Vulnerability Test $Id: gbadobeonlocationlibloadvulnwin.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe On Location Insecure Library Loading Vulnerability Windows Authors: Antu Sanadi...

Adobe On Location Insecure Library Loading Vulnerability - Windows

Adobe On Location is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

Information disclosure

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

CVE-2010-1809

The CVE-2010-1809 entry concerns Apple iOS prior to 4.1, specifically the Accessibility VoiceOver feature failing to announce the location services icon on iPhone/iPod touch. The underlying issue is tied to the Accessibility component and VoiceOver handling, with impact and attack vectors not exp...

CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

PT-2010-3442 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: The issue concerns the Accessibility component, specifically the VoiceOver feature, which does not announce the location services icon as expected. The impact and attack vectors of this issue are n...

UltraVNC 1.0.8.2 - DLL Loading Arbitrary Code Execution

UltraVNC 1.0.8.2 - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42846/info UltraVNC is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to op...