OCS Inventory NG 2.0.1 Persistent XSS

No description provided by source. OCS Inventory NG 2.0.1 - Persistent XSS CVE-2011-4024 ------------------------------------------------------- Software : Open Computer and Software OCS Inventory NG Download : http://www.ocsinventory-ng.org/ Discovered by : Nicolas DEROUET nicolas.derouetgmailco...

yappa-ng Query String XSS

No description provided by source. source: http://www.securityfocus.com/bid/32623/info The 'yappa-ng' program is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

Ettercap NG-0.7.3 DLL Hijacking Exploit (wpcap.dll)

No description provided by source. / Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: Anonymous Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit...

yappa-ng <= 2.3.1 (admin_modules) Remote File Include Vulnerability

No description provided by source. ============================================================================================== yappa-ng = v2.3.1 adminmodules Remote File Inclusion Exploit =============================================================================================== Critical...

Amavis 0.1.6 Header Parsing Mail Relaying Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7306/info It has been reported that some versions of Amavis-ng do not properly interact with Postfix. Because of this, an attacker may be able to circumvent relay restrictions. telnet somemx.domain.tld 25 220...

Ettercap-NG 0.7.3 - Remote Denial of Service Exploit

No description provided by source. / WARNING WARNING WARNING THIS PACKAGE CONTAINS AN 0DAY. NO ONE CAN BE HELD RESPONSIBLE IF THIS CODE RAPES YOUR SISTER OR MOLESTS YOUR DOG. WARNING WARNING WARNING THE ONE PACKET ETTERCAP KILLER NOW IN A SMALLER PACKAGE! If you want to know how this works then...

openSUSE Security Update : wireshark (openSUSE-SU-2012:0558-1)

Changes in wireshark : - update to 1.4.12 - fix bnc754474, bnc754476, bnc754477fixed upstream - Security fixes : - wnpa-sec-2012-04 The ANSI A dissector could dereference a NULL pointer and crash. Bug 6823 - wnpa-sec-2012-06 The pcap and pcap-ng file parsers could crash trying to read ERF data. B...

openSUSE Security Update : libcap-ng (openSUSE-SU-2014:0736-1)

Besides other enhancements, this version update contains : - fix for CVE-2014-3215 bnc876832 - use PRSETNONEWPRIVS to prevent gain of new privileges - added libcap-ng-CVE-2014-3215.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Mandriva Linux Security Advisory : libcap-ng (MDVSA-2014:117)

Updated libcap-ng packages fix security vulnerability : capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

MGASA-2014-0251 Updated libcap-ng packages fix CVE-2014-3215

Updated libcap-ng packages fix security vulnerability: capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

Updated libcap-ng packages fix CVE-2014-3215

Updated libcap-ng packages fix security vulnerability: capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

CVE-2014-2346

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...

CVE-2014-2345

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...

Design/Logic Flaw

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...

CVE-2014-2346 COPA-DATA zenon DNP3 Improper Input Validation

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...

CVE-2014-2345

Summary of CVE-2014-2345 : COPA-DATA zenon DNP3 NG driver (DNP3 master) and zenon DNP3 Process Gateway (DNP3 outstation) have an improper input validation flaw that allows remote attackers to trigger a denial of service (infinite loop and process crash) by sending a crafted DNP3 packet over TCP. ...

CVE-2014-2346

The CVE-2014-2346 issue affects COPA-DATA zenon DNP3 NG driver (DNP3 master) and zenon DNP3 Process Gateway (DNP3 outstation). Affected versions are zenon DNP3 NG driver (7.10 SP0 up to 7.11 SP0 build 10238) and zenon DNP3 Process Gateway (7.11 SP0 build 10238 and prior). The root cause is improp...

CVE-2014-2345: Improper Input Validation

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...

CVE-2014-2346: Improper Input Validation

COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...

PT-2014-4639

Name of the Vulnerable Software and Affected Versions COPA-DATA zenon DNP3 NG driver DNP3 master versions 7.10 through 7.11 SP0 build 10238 COPA-DATA zenon DNP3 Process Gateway DNP3 outstation versions 7.11 SP0 build 10238 and earlier Description The issue allows physically proximate attackers to...