PT-2013-4251 · Videolan · Vlc Media Player

Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 2.0.7 Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file. This could involve an integer overflow, out-of-bounds read, ...

PT-2013-4748 · Atlassian · Crowd

Name of the Vulnerable Software and Affected Versions: Atlassian Crowd version 2.6.3 Description: The issue allows remote attackers to execute arbitrary commands. The vendor was unable to reproduce the issue as of 20130704 and stated that they could not substantiate the existence of the problem d...

Schneider Electric Accutech Manager - Heap Overflow (PoC)

Schneider Electric Accutech Manager Server Heap Overflow PoC RFManagerService - Port: 2537 I think this is the same vuln that ExodusIntel discovered. Credit also goes to Aaron Portnoy, ExodusIntel. The patch has not been released yet. Evren Yalcin, Signalsec Ltd. www.signalsec.com Download app:...

PT-2013-1834 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices versions 8.x through 8.41 Description: The issue is related to improper management of SSH sessions, which allows remote authenticated users to cause a denial of service device crash by establishi...

Colloquy 1.3.5/1.3.6 - Denial of Service

!/usr/bin/python3 Wednesday, January 09, 2013 . . | || || | || \ / | / \ / | |/ \ / \ | || || |\ // // | \ / /\ /||/|| / |||| // / http://www.zempirians.com 00100011 01101100 01100101 01100111 01101001 01101111 01101110 -= Colloquy - A Mac OS X Internet Chat client. =- Proof of Concept, Denial...

Websense Proxy - Filter Bypass

Websense Proxy - Filter Bypass Websense Proxy Filter Bypass 1. Advisory Information Date published: 2012-11-25 Vendors contacted: Websense Release mode: Coordinated release Vendor was notified 2. Vulnerability Information Class: Filter Bypass Remotely Exploitable: Yes 3. Software Description...

PT-2012-3340 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 9 Description: A use-after-free issue allows remote attackers to execute arbitrary code via a crafted web site. This occurs due to incorrect access to an object that has not been correctly initialized or ha...

PT-2012-1046 · Debian · Hostapd

Name of the Vulnerable Software and Affected Versions: hostapd versions 0.6 through 1.0 Description: The issue concerns multiple vulnerabilities in the hostapd package of the Debian GNU/Linux operating system, which can be exploited remotely to disrupt the availability of protected information...

MF Gig Calendar Wordpress Plugin - Cross-Site Scripting

/--------------------------------------------------------- | MF Gig Calendar Wordpress Plugin - Cross-Site Scripting | ---------------------------------------------------------/ Summary ======= MF Gig Calendar 0.9.2 is subject to a cross-site scripting vulnerability. The value of a generic...

PT-2012-1245 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Reliability Analysis Metrics Calculation Engine RACEng affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Reliability Analysis Metrics Calculation Engine RACEng due to inadequat...

Joomla Car Component Multiple SQL Injection Vulnerabilities

This host is running Joomla car component and is prone to multiple SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomcarmultsqlinjvuln.nasl 5888 2017-04-07 09:01:53Z teissa $ Joomla Car Component Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright: Copyright ...

Joomla XBall Component SQL Injection Vulnerability

This host is running Joomla XBall component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomxballsqlinjvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Joomla XBall Component SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

Joomla Boss Component Local File Inclusion Vulnerability

This host is running Joomla Boss component and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacombosslfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla Boss Component Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities

The host is running SQLiteManager and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsqlitemanagermultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities Authors: Rachana Shetty...

FreeSSHd Remote Denial of Service Vulnerability

The host is running FreeSSHd and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodfreesshdremotedosvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ FreeSSHd Remote Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

HP Data Protector Media Operations Heap Buffer Overflow Vulnerability

This host is running HP Data Protector Media Operations and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbhpdataprotectormediaoperationsbofvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ HP Data Protector Media Operations Heap Buffer Overflow Vulnerability Authors:...

Calisto Light / Light Plus / Full SQL Injection

Calisto light, light plus and full, Sql Injection And user or Admin bypass Vendor URL: http://www.calistosoft.com.ar/ Advisore: http://lostmon.blogspot.com/2011/08/calisto-light-light-plus-and-full-sql.html Vendor notify: YES exploit available: YES Vulnerability Description Calisto Light, Light...

GE Proficy Historian Web Administrator XSS

Overview ICS-CERT originally released Advisory ICSA-11-243-02P on the US-CERT secure Portal on August 31, 2011. ICS-CERT has received a report from independent security researchers Billy Rios and Terry McCorkle concerning multiple cross-site scripting XSS vulnerabilities in the GE Intelligent...

Synergy Protocol Information Disclosure Vulnerability (Windows)

This host is installed with Synergy and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbsynergyprotocolinfodiscvulnwin.nasl 8189 2017-12-20 09:10:19Z cfischer $ Synergy Protocol Information Disclosure Vulnerability Windows Authors: Sooraj KS Copyright: Copyrigh...

SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability

This host is installed with SAP Crystal Reports and is prone to heap-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsapcrystalreportsbofvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability Authors: Madhuri D...