Huawei VP9660 Multi-Point Control Unit Multiple Vulnerabilities (huawei-sa-20151111-01-vp9660)

Huawei VP9660 Multi-Point Control Unit is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Advisory - Input Validation Vulnerability in Huawei VP9660 Products

VP9660 is the multi-point control unit of Huawei Video Conference system. The server of the Huawei VP9660 does not validate the input when using build-in WebServer. In such case, an attacker could log in to the device as an business administrator, graft a message to change the specific informatio...

Zendesk: CSV Excel Macro Injection Vulnerability in export chat logs

Scenario: An attacker creates a name as =AND21 with a fake email and with random text in the message body. This is similar to a vulnerability recently found in zendesk.com as well. When a team member clicks export as csv and opens it instead of seeing =AND21 they see TRUE. Meaning that cell is no...

FVWM 2.4/2.5 fvwm-menu-directory Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9161/info It has been reported that FVWM may be prone to a command execution vulnerability that may allow an attacker to execute malicious commands on a vulnerable system. It has been reported that the fvwm-menu-directory...

SpeechD 0.1/0.2 Privileged Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3326/info SpeechD is a device-independent layer for speech synthesis under Linux, providing an interface for speech-based applications or device drivers. SpeechD has been found to contain a flaw under certain...

Mandrake Linux Security Advisory : joe (MDKSA-2001:026)

The joe text editor looks for configuration files in the current working directory, the user's home directory, and finally in /etc/joe. A malicious user could create their own .joerc configuration file and attempt to get other users to use it. If this were to happen, the user could potentially...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

MP3 Studio 1.0 (.mpf /.m3u File) Local Stack Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits =================================================================== MP3 Studio 1.0 .mpf /.m3u File Local Stack Overflow Exploit SEH =================================================================== + Vulnerability : .mpf /.m3u File Local...

Nortel UNIStim IP Softphone Buffer-Overflow

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Softphone Vendor: Nortel Subject: UNIStim IP Softphone Buffer-Overflow Risk: High Effect: Currently not exploitable Author: Cyrill Brunschwiler cyrill.brunschwiler at csnc dot ch Date: October, 18th 2007 Introduction: ------------- Floodin...

Mac OS X 10.4.8 DiskManagement BOM (cron) Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com code from the other exploit, porting Kevin Finisterre kflists at digitalmunition.com crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one...

CVE-2006-3119

The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands...

CVE-2006-3119

The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands...

CVE-2006-3119

The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands...

RHEL 2.1 : kdbg (RHSA-2005:416)

An updated kdbg package that fixes a minor security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. Kdbg is a K Desktop Environment KDE GUI for gdb, the GNU debugger. Kdbg 1.1.0 through 1.2.8...

KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution

source: https://www.securityfocus.com/bid/11827/info KDE FTP kioslave-based applications such as Konqueror are reported prone to an arbitrary FTP server command execution vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to utilizi...

vBulletin 2.0.3 - calendar.php Command Execution

vBulletin 2.0.3 - calendar.php Command Execution source: https://www.securityfocus.com/bid/5820/info A remote command execution vulnerability has been reported for vBulletin. The vulnerability is due to vBulletin failing to properly sanitize user-supplied input from URI parameters. An attacker ca...

CVE-2001-1002

The default configuration of the DVI print filter dvips in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands...

Critical: Red Hat Security Advisory: : Updated wu-ftpd packages are available

Updated wu-ftpd packages are available to fix an overflowable buffer. An overflowable buffer exists in earlier versions of wu-ftpd. An attacker could gain access to the machine by sending malicious commands. It is recommended that all users of wu-ftpd upgrade to the lastest version...

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying // source: https://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc call...

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying

// source: https://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc calls to other rpc services without being validated ...