Ettercap-NG 0.7.3 - Remote Denial of Service Exploit

No description provided by source. / WARNING WARNING WARNING THIS PACKAGE CONTAINS AN 0DAY. NO ONE CAN BE HELD RESPONSIBLE IF THIS CODE RAPES YOUR SISTER OR MOLESTS YOUR DOG. WARNING WARNING WARNING THE ONE PACKET ETTERCAP KILLER NOW IN A SMALLER PACKAGE! If you want to know how this works then...

yappa-ng Query String XSS

No description provided by source. source: http://www.securityfocus.com/bid/32623/info The 'yappa-ng' program is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

yappa-ng index.php album Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/32623/info The 'yappa-ng' program is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

yappa-ng <= 2.3.3-beta0 (album) Local File Inclusion Vulnerability

No description provided by source. o------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : yappa-ng Version 2.3.2 | | Vendor :...

Ettercap NG-0.7.3 DLL Hijacking Exploit (wpcap.dll)

No description provided by source. / Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: Anonymous Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit...

Amavis 0.1.6 Header Parsing Mail Relaying Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7306/info It has been reported that some versions of Amavis-ng do not properly interact with Postfix. Because of this, an attacker may be able to circumvent relay restrictions. telnet somemx.domain.tld 25 220...

OCS Inventory NG 2.0.1 Persistent XSS

No description provided by source. OCS Inventory NG 2.0.1 - Persistent XSS CVE-2011-4024 ------------------------------------------------------- Software : Open Computer and Software OCS Inventory NG Download : http://www.ocsinventory-ng.org/ Discovered by : Nicolas DEROUET nicolas.derouetgmailco...

Aircrack-ng 0.7 - (Specially Crafted 802.11 Packets) Remote BoF Exploit

No description provided by source. / airodump-exp.c - aircrack/airodump-ng 0.7 remote exploit Proof of concept exploit for a stack and heap based overflow in airodump-ng. The vulnerability can be exploited by transmitting some specially crafted 802.11 packets to execute arbitrary code on any...

Yappa-NG 1.x/2.x Unspecified Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13371/info yappa-ng is prone to a remote file include vulnerability. This issue may let remote attackers include and execute malicious remote PHP scripts. The vendor has not published any specific details about this...

Yappa-NG 1.x/2.x Unspecified Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13372/info yappa-ng is prone to an unspecified cross-site scripting vulnerability. This issue may allow for theft of cookie-based authentication credentials or other attacks. The vendor has not published any specific...

OCS Inventory NG Server <= 1.3.1 (login) Remote Authentication Bypass

No description provided by source. !-- OCS Inventory NG Server = 1.3.1 login Remote Authentication Bypass Software : Open Computer and Software OCS Inventory NG Download : http://www.ocsinventory-ng.org/ Discovered by : Nicolas DEROUET nicolas.derouetgmailcom Discover : 2010-02-05 Published :...

openSUSE Security Update : libcap-ng (openSUSE-SU-2014:0736-1)

Besides other enhancements, this version update contains : - fix for CVE-2014-3215 bnc876832 - use PRSETNONEWPRIVS to prevent gain of new privileges - added libcap-ng-CVE-2014-3215.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

openSUSE Security Update : wireshark (openSUSE-SU-2012:0558-1)

Changes in wireshark : - update to 1.4.12 - fix bnc754474, bnc754476, bnc754477fixed upstream - Security fixes : - wnpa-sec-2012-04 The ANSI A dissector could dereference a NULL pointer and crash. Bug 6823 - wnpa-sec-2012-06 The pcap and pcap-ng file parsers could crash trying to read ERF data. B...

Mandriva Linux Security Advisory : libcap-ng (MDVSA-2014:117)

Updated libcap-ng packages fix security vulnerability : capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

Updated libcap-ng packages fix CVE-2014-3215

Updated libcap-ng packages fix security vulnerability: capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

MGASA-2014-0251 Updated libcap-ng packages fix CVE-2014-3215

Updated libcap-ng packages fix security vulnerability: capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

CVE-2014-2346

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...

CVE-2014-2345

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...

Design/Logic Flaw

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...

CVE-2014-2346 COPA-DATA zenon DNP3 Improper Input Validation

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...