593 matches found
CVE-2014-7772: Undefined Security Weakness
The MB Tickets aka com.xcr.android.mbtickets application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
TestingWhiz - Test Automation Tool
TestingWhiz is a test automation tool for web, database, cloud, mobile and web services/API testing from Cygnet Infotech. It has a codeless architecture based on FAST Automation Engine with 290+ readily available test commands that provide easy, intuitive and fast automation solution without...
PT-2012-4265
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to an unspecified vulnerability in the decode mb info function, located in libavcodec/indeo5.c. This...
PT-2010-5328
Name of the Vulnerable Software and Affected Versions Libmbfl version 1.1.0 PHP versions 5.3.x through 5.3.3 Description The issue allows context-dependent attackers to obtain potentially sensitive information via a large value of the length parameter in the mb strcut function. Recommendations Fo...
CVE-2009-3578
Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a 1 .ma or 2 .mb file that uses the Maya Embedded Language MEL python command or unspecified other MEL commands, related to "Script Nodes."...
Autodesk Maya脚本节点文件远程代码执行漏洞
BUGTRAQ ID: 36636 CVE ID: CVE-2009-3578 Maya是一款高端的3D计算机图形和3D建模软件包。 Maya提供了被称为“脚本节点”的方式用于使用MEL(Maya的专有编程语言)和Python对动画行为进行编程。脚本节点保存为.mb和.ma文件格式。通过使用嵌入有脚本节点的特制文件,用户打开恶意的场景文件后就会无需任何干涉便可执行任意命令。 Autodesk Maya 8.5 Autodesk Maya 8.0 Autodesk Maya 2010 Autodesk Maya 2009 Autodesk Maya 2008 临时解决方法:...
CVE-2009-3578: Improper Control of Generation of Code
Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a 1 .ma or 2 .mb file that uses the Maya Embedded Language MEL python command or unspecified other MEL commands, related to "Script Nodes."...
HP-UX Security Patch : PHKL_34039
MB direct I/O;vxpagestrategy panic %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26424; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11...
HP-UX Security Patch : PHKL_34665
MB direct I/O;vxpagestrategy panic;hang %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26430; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
Sql injection
SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...
Ubuntu 4.10 / 5.04 / 5.10 : php4, php5 vulnerabilities (USN-232-1)
Eric Romang discovered a local Denial of Service vulnerability in the handling of the 'session.savepath' parameter in PHP's Apache 2.0 module. By setting this parameter to an invalid value in an .htaccess file, a local user could crash the Apache server. CVE-2005-3319 A Denial of Service flaw was...
Pirelli AGE mB Router Default Password (Telnet)
The remote host is a Pirelli AGE mB microBusiness router with its default password set admin/microbusiness. SPDX-FileCopyrightText: 1999 Anonymous Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Pirelli AGE mB Router Default Password (microbusiness) for 'admin' Account
The remote host is a Pirelli AGE mB microBusiness router with its default password set admin/microbusiness. An attacker could telnet to it and reconfigure it to lock the owner out and to prevent him from using his Internet connection, and do bad things. Changes by Tenable: - only attempt to login...