Heap overflow

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a MODBUS response packet with a crafted length field...

CVE-2010-4709

CVE-2010-4709 = heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server (pre-3.0.2). A Modbus/TCP response with a crafted length field can crash the server and may allow arbitrary code execution, per NVD/ICS-CERT reporting. The most reliable public mitigation is to upgrade ...

CVE-2011-0651

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

BSD x86 connect back Shellcode 81 bytes

BSD x86 connect back Shellcode 81 bytes. Shellcode exploit for bsdx86 platform / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include include char shellcode =...

New Seftad Ransomware Attacks Master Boot Record

One day after a new version of the GpCode ransomware popped up, researchers have discovered another piece of malware that overwrites the master boot record on infected machines and demands a payment of $100 to reverse the damage. The new MBR-infecting ransomware is known as Seftad and it has a...

Apache Hadoop HDFS NameNode Web Detection

The web interface for a NameNode was detected on the remote host. A NameNode is the master server in a Hadoop Distributed File System HDFS cluster. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50306; scriptversion"1.8"; scriptcvsdate"Date: 2019/11/25";...

kernel: drivers/net/eql.c: reading uninitialized stack memory

The eqlgmastercfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQLGETMASTRCFG ioctl call...

Intel Finds BluRay HDCP Crack

Intel has confirmed Blu-ray HDCP encryption is cracked after admitting a leaked master key is the real deal. High-bandwidth Digital Content Protection HDCP copy protection technology is designed to protect high-definition video content as it travels across digital interfaces. Read the full...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

HP-UX PHSS_39886 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)

s700800 11.X OV EMANATE15.3 PA-RISC Consolidated Patch 6 : A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows. The vulnerability could be exploited remotely to gain unauthorized access. %NASLMINLEVEL 70300 C Tenab...

bbPress v1.0.2 Cross-Site Request Forgery

No description provided by source. : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com html body onload=\"document.forms\'Login\'.submit;\" form...

bbPress v1.0.2 Cross-Site Request Forgery

Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...

DNSSEC Ceremony Generates Master Root Key

The dream of bolting security onto the Internet’s Domain Name System takes one step closer to reality as Internet policymakers hosted a ceremony in northern Virginia to generate and store the first cryptographic key that will be used to secure the Internet’s root zone. Read the full article...

Unfixed XSS vulnerability at www.recordstore.co.uk

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting www.recordstore.co.uk, which at the time of submission ranked 225710 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/04/2011. It is...

Unfixed XSS vulnerability at www.mobileburn.com

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting www.mobileburn.com, which at the time of submission ranked 30163 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at wap.megachat.fi

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting wap.megachat.fi, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

Medium security hole in Varnish reverse proxy

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20090908 Date: 26th September 2009 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: Varnish 2.0.4 http://www.varnish-cache.org/ Vendor:...

HP-UX PHSS_40229 : HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local Unauthorized Access (HPSBUX02464 SSRT090210 rev.1)

s700800 11.23 ECMT B.05.00 patch : A potential security vulnerability has been identified on HP Enterprise Cluster Master Toolkit ECMT version B.05.00 running on HP-UX. This vulnerability could be exploited by local users to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security...

Mozilla Admits Malware Sneaked into Firefox Add-ons

Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...

CVE-2009-4184

HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and B.11.31 (11i v3) is affected by CVE-2009-4184, a local vulnerability that could allow an unprivileged user to gain unauthorized access to Oracle or Sybase databases via unspecified vectors. HP’s security bulletin HP...