Automated Solutions Modbus/TCP Master OPC server Modbus TCP header vulnerability

Overview Automated Solutions OPC Server contains a heap corruption vulnerability in the Modbus/TCP Master OPC server. Description Automated Solutions Modbus/TCP Master OPC Server contains a heap corruption vulnerability. The server is vulnerable to an attacker writing an arbitrary number of doubl...

CVE-2011-0651

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

Heap overflow

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a MODBUS response packet with a crafted length field...

CVE-2010-4709

CVE-2010-4709 = heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server (pre-3.0.2). A Modbus/TCP response with a crafted length field can crash the server and may allow arbitrary code execution, per NVD/ICS-CERT reporting. The most reliable public mitigation is to upgrade ...

CVE-2011-0651

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

CVE-2011-0651: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

CVE-2010-4709: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a MODBUS response packet with a crafted length field...

BSD x86 connect back Shellcode 81 bytes

BSD x86 connect back Shellcode 81 bytes. Shellcode exploit for bsdx86 platform / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include include char shellcode =...

New Seftad Ransomware Attacks Master Boot Record

One day after a new version of the GpCode ransomware popped up, researchers have discovered another piece of malware that overwrites the master boot record on infected machines and demands a payment of $100 to reverse the damage. The new MBR-infecting ransomware is known as Seftad and it has a...

Apache Hadoop HDFS NameNode Web Detection

The web interface for a NameNode was detected on the remote host. A NameNode is the master server in a Hadoop Distributed File System HDFS cluster. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50306; scriptversion"1.8"; scriptcvsdate"Date: 2019/11/25";...

kernel: drivers/net/eql.c: reading uninitialized stack memory

The eqlgmastercfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQLGETMASTRCFG ioctl call...

CVE-2010-3780: Undefined Security Weakness

Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service master process outage by simultaneously disconnecting many 1 IMAP or 2 POP3 sessions...

Intel Finds BluRay HDCP Crack

Intel has confirmed Blu-ray HDCP encryption is cracked after admitting a leaked master key is the real deal. High-bandwidth Digital Content Protection HDCP copy protection technology is designed to protect high-definition video content as it travels across digital interfaces. Read the full...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

HP-UX PHSS_39886 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)

s700800 11.X OV EMANATE15.3 PA-RISC Consolidated Patch 6 : A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows. The vulnerability could be exploited remotely to gain unauthorized access. %NASLMINLEVEL 70300 C Tenab...

bbPress v1.0.2 Cross-Site Request Forgery

No description provided by source. : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com html body onload=\"document.forms\'Login\'.submit;\" form...

bbPress v1.0.2 Cross-Site Request Forgery

Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...

DNSSEC Ceremony Generates Master Root Key

The dream of bolting security onto the Internet’s Domain Name System takes one step closer to reality as Internet policymakers hosted a ceremony in northern Virginia to generate and store the first cryptographic key that will be used to secure the Internet’s root zone. Read the full article...

Unfixed XSS vulnerability at www.recordstore.co.uk

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting www.recordstore.co.uk, which at the time of submission ranked 225710 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/04/2011. It is...

Unfixed XSS vulnerability at www.mobileburn.com

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting www.mobileburn.com, which at the time of submission ranked 30163 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...