"The given key was not present in the dictionary" error while opening nworks UI

"The given key was not present in the dictionary" error while opening nworks UI...

Ubuntu Update for puppet USN-1223-2

Ubuntu Update for Linux kernel vulnerabilities USN-1223-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN12232.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for puppet USN-1223-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 10.04 LTS / 10.10 / 11.04 : puppet vulnerabilities (USN-1223-1)

It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. CVE-2011-3869 Ricky Zhou discovered that Puppet did not drop privileges when creating SSH...

Microsoft Visio insecure DLL loading

Unsafe DLL loading on associated files opening...

Microsoft Word .docx Insecure Library Loading (MS11-023; CVE-2011-0107)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been reported in the way that Microsoft Word handles the loading of DLL files. The vulnerability is caused when Microsoft Office Word incorrectly restricts the path used for loading external libraries...

Ichitaro series vulnerable to arbitrary code execution

Overview The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. This vulnerability differs from JVN19173793, and other issues that were previously published on JVN. Impact When opening a specially crafted file...

TeraPad may insecurely load dynamic libraries

Overview TeraPad may use unsafe methods for determining how to load DLLs. TeraPad is a text editor. TeraPad loads certain DLL's when TXT files are opened. TeraPad contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Makoto Shiotsuki reported this...

K2Editor may insecurely load executable files

Overview K2Editor may use unsafe methods for determining how to load executables .exe. K2Editor is a text editor. K2Editor loads certain executables .exe when opening the folder that contains the text file that is being edited. K2Editor contains an issue with the file search path, which may...

PowerDVD 5.0.1107 - trigger.dll DLL Loading Arbitrary Code Execution

PowerDVD 5.0.1107 - trigger.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44193/info PowerDVD is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

Data URIs can be used to allow cross-site scripting – Opera Security Advisories

Data URIs can be used to allow cross-site scripting – Opera Security Advisories OPCOM Team | June 22, 2010 Severity Highly severe Description Data URIs are allowed to run scripts that manipulate pages from the site that directly opened them. In some cases, the opening site is not correctly...

Data URIs can be used to allow cross-site scripting

Data URIs are allowed to run scripts that manipulate pages from the site that directly opened them. In some cases, the opening site is not correctly detected. In these cases, Data URIs may erroneously be able to run scripts so that they interact with sites that did not directly cause them to be...

DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers

Hello Bugtraq! I want to warn you about security vulnerability in different browsers. ----------------------------- Advisory: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ----------------------------- URL: http://websecurity.com.ua/4206/...

Dolphin 2.0 Denial Of Service

Exploit Title: Dolphin 2.0 .elf Local Daniel Of Service Date: 08/05/2010 Author: Pr0T3cT10n Software Link: http://www.dolphin-emu.com/ Version: 2.0 Tested on: 2.0 CVE: Code: Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a file by...

Dolphin 2.0 - .elf Local Denial of Service

Dolphin 2.0 - .elf Local Denial of Service Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a file by 'OpenCTRL+O' that contains 9999 chars 'A', so dolphin should crash. PoC / Code: $buffer = strrepeat'A', 99999; Create 9999...

Dualis 20.4 - '.bin' Local Denial of Service

Site: http://www.nullbyte.org.il Dualis 20.4 is vulnerable to local denial of service attack. When we try to open a file by 'Load and ExecuteCTRL+R' that contains 9999 chars 'A', so dualis should crash. PoC / Code: $buffer = strrepeat'A', 9999; Create 9999 chars'A'.. iffileputcontents'crash.bin',...

Dualis 20.4 - .bin Local Denial of Service

Dualis 20.4 - .bin Local Denial of Service Site: http://www.nullbyte.org.il Dualis 20.4 is vulnerable to local denial of service attack. When we try to open a file by 'Load and ExecuteCTRL+R' that contains 9999 chars 'A', so dualis should crash. PoC / Code: $buffer = strrepeat'A', 9999; Create 99...

DECT Base Station Scanner

This module scans for DECT base stations This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DECT Base Station Scanner', 'Description' = 'This module scans for DECT base stations', 'Author' = 'DK '...

PHPizabi 0.848b Privilege Escalation

-------------------------------------------------------------------------------- PHPizabi v0.848b C1 HFP1 proc.inc.php remote privilege escalation php.ini independent by Nine:Situations:Group::bookoo -------------------------------------------------------------------------------- our site:...

Ubuntu: Security Advisory (USN-493-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Media Player 91011 - .WAV File Parsing Code Execution

Microsoft Windows Media Player 91011 - .WAV File Parsing Code Execution // source: https://www.securityfocus.com/bid/33042/info Microsoft Windows Media Player is prone to a code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious...