Design/Logic Flaw

The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a...

Ubuntu Update for nut USN-1456-1

Ubuntu Update for Linux kernel vulnerabilities USN-1456-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14561.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nut USN-1456-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

FlexNet License Server Manager - lmgrd Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'FlexNet License Server Manager lmgrd...

Symantec Web Gateway Multiple Security Issues

SUMMARY Symantecs Web Gateway management GUI is susceptible to file include command injection/execution, file upload/execution and file download/deletion security issues. The management GUI is also susceptible to cross-site scripting XSS. Successful exploitation could result in execution of...

Microsoft, Security Experts Warn 'Wormable' RDP Exploit Will Come Sooner Than Later

As a follow-up to its usual Patch Tuesday release this week, officials at Microsoft are warning users that an exploit against the recently disclosed Remote Desktop Protocol RDP vulnerability for Windows is likely to come in the next 30 days. According to a supplementary entry on its Security...

mysql: over-sized packet denial of service vulnerability

The mynetskiprest function in sql/netserv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a large number of packets that exceed the maximum length...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network...

Attacking 3G and 4G Mobile Tele-Communications Networks

Document Title: =============== Attacking 3G and 4G Mobile Tele-Communications Networks References: =========== Document: http://www.vulnerability-lab.com/resources/documents/320.pdf Speaker: http://conference.hitb.org/hitbsecconf2011kul/?pageid=1782 Original Mirror:...

HP OpenView Network Node Manager nnmRptConfig.exe Buffer Overflow (CVE-2011-0268)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...

CVE-2010-4565

The bcmconnect function in net/can/bcm.c aka the Broadcast Manager in the Controller Area Network CAN implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensiti...

CVE-2010-4168

Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow 1 remote attackers to cause a denial of service invalid write and daemon crash by abruptly disconnecting during transmission of the map from the server, related to network/networkserver.cpp; 2 remote attackers to cause a...

Cable Modem Termination System Authentication Bypass - Cisco Systems

Two issues are described in this security advisory. The first issue involves cable modems not manufactured by Cisco that allow a configuration file to be downloaded from an interface that is not connected to the network of the cable modem's service provider. This historical behavior allows an...

Bouncing RPC

In the early years of Core Security Technologies, the company not only offered security consulting services, but often was sub-contracted to do R+D for several security vendors. The first and most intellectually rewarding of such contracts came from Secure Networks Inc. SNI, a Canadian start-up...

AlienTechnology ALR-9900 default root password and backdoor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tested: www.alientechnology.com/readers/alr9900.php Background: Alien Technology is a major rfid-reader designer and manufacturer. Alien's products are sold to many corporations and the military. Alien's readers can be interfaced with in several ways...

Multiple Vendor AgentX++ - Stack Buffer Overflow (PoC)

Exploit Title: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability Date: 2010-04-17 Author: ZSploit.com Software Link: N/A Version: N/A Tested on: RealNetworks Helix Server v11 CVE : CVE-2010-1318 ! /usr/bin/env python File : zsagentxbof.py Description: : CreatedOn : Apr 17 2010 c...

Luo letter network built station of 0DAY-vulnerability warning-the black bar safety net

Baidu or google "technical support：Luo letter network" Background address: site+lx Database address: site+lx+databases+Main Domain Name. asp need to guess Account&password: admin admin Down is to get the shell Important part: upload the jpg format of the asp horse Database backup,Please note that...

RCA DCM425 Cable Modem micro_httpd DoS/PoC

No description provided by source. !/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis Info: This script causes a Denial of Service on a DCM425 cable modem. Sending 1040 bytes causes a reboot of the device after a few seconds of it freezing up. I believ...

ISC DHCP dhclient script_write_params Stack Buffer Overflow (CVE-2009-0692)

The Dynamic Host Configuration Protocol DHCP protocol is used to centrally manage and automate the assignment of IP addresses on a network. It is an extension of the BOOTP protocol. In addition to IP address assignment, DHCP clients receive from a DHCP server information that is required to manag...

kernel: e1000_clean_rx_irq() denial of service

Integer underflow in the e1000cleanrxirq function in drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet aka e1000 before 7.5.5 allows remote attackers to cause a denial of service panic via a...

ISPs Leave Modems Open to DDoS Attacks

Internet security experts say that misconfigured DSL and cable modems are worsening a well-known problem with the Internet’s DNS, making it easier for hackers to launch DDoS attacks against their victims. According to research, part of the problem is blamed on the growing number of consumer devic...