CVE-2012-4578

The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack...

PT-2012-5486

Name of the Vulnerable Software and Affected Versions geli encryption provider versions prior to r239184 on FreeBSD 10 Description The issue concerns a weak Master Key used by the geli encryption provider, making it easier for local users to defeat a cryptographic protection mechanism via a...

CVE-2012-4578: Undefined Security Weakness

The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack...

Egypt MASTER VISION Int.Solutions - Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

CVE-2009-5026

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments...

CVE-2009-5026: Improper Neutralization of Special Elements used in an SQL Command

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments...

DEBIAN-CVE-2012-3864

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request...

Design/Logic Flaw

lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for lastrunreport.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file...

CVE-2012-3865

Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. dot dot in a...

ZeroNights 2012, Москва 19-20 ноября

Привет всем, Попросили запостить от defcon-group. Цитата: Заявка на участие в конференции в качестве докладчика ZeroNights — международная конференция, посвященная техническим аспектам информационной безопасности. Главная цель конференции — распространение информации о новых методах атак, угрозах...

RealNetworks Helix Server SNMP Master Agent Open-PDU Denial of Service

A denial of service vulnerability has been reported in RealNetworks Helix server...

puppet -- multiple vulnerabilities

puppet -- multiple vulnerabilities Arbitrary file read on the puppet master from authenticated clients high. It is possible to construct an HTTP get request from an authenticated client with a valid certificate that will return the contents of an arbitrary file on the Puppet master that the maste...

puppet -- multiple vulnerabilities

puppet -- multiple vulnerabilities Arbitrary file read on the puppet master from authenticated clients high. It is possible to construct an HTTP get request from an authenticated client with a valid certificate that will return the contents of an arbitrary file on the Puppet master that the maste...

Audio Editor Master 5.4.1.217 - Denial of Service

!/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog: otakku-udang.blogspot.com from : Information Security Shinobi Ca...

Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog:...

Audio Editor Master 5.4.1.217 Denial Of Service

!/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog: otakku-udang.blogspot.com from : Information Security Shinobi Ca...

Audio Editor Master 5.4.1.217 - Denial of Service

Audio Editor Master 5.4.1.217 - Denial of Service !/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog:...

Secunia Research: Helix Server SNMP Master Agent Service Two Denial of Service Vulnerabilities

====================================================================== Secunia Research 09/04/2012 - RealNetworks Helix Server SNMP Master Agent - - Two Denial of Service Vulnerabilities - ====================================================================== Table of Contents Affected...

CVE-2012-2268

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different...

CVE-2012-2267

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service daemon crash by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923...