7879 matches found
Fraudulent eBay Cookie-Code Stuffer Busted
Federal authorities are charging a Las Vegas man with marketing a so-called “cookie-stuffing” operation, enriching himself and others while defrauding eBay along the way. Read the full article. Wired...
CVE-2010-0409
Buffer overflow in the GMIMEUUENCODELEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via input data for a uuencode operation...
CVE-2010-0409
Buffer overflow in the GMIMEUUENCODELEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via input data for a uuencode operation...
3 6 0 security guards bregdrv. sys and bregdll. dll file local privilege escalation exploit.-vulnerability warning-the black bar safety net
3 6 0 Security Defender is in China, the widely used free Internet security software. 3 6 0 security guards in the installation process on the user's system to install a registry operation program, the program can be used to bypass theoperating systemthe security check mechanism of any operation...
Microsoft Internet Explorer "Aurora" Memory Corruption
$Id: ieaurora.rb 8140 2010-01-16 01:00:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Memory corruption
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessin...
CVE-2010-0249
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessin...
PT-2010-2049
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8 Description The issue allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling o...
linux/x86 append "/etc/passwd" & exit() 107 bytes
No description provided by source. view source print? / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38...
linux/x86 append ""/etc/passwd"" & exit() 107 bytes
No description provided by source. / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38 jmp 804908e callfun...
setfacl / getfacl symbolic links vulnerability
Symbolic links are followed on recursive operation...
Sql injection
Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the 1 id and possibly 2 db parameters in a Delete action to the output of a VendorsReportsSearch search operation...
CVE-2009-3582
Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the 1 id and possibly 2 db parameters in a Delete action to the output of a VendorsReportsSearch search operation...
CVE-2009-3582
Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the 1 id and possibly 2 db parameters in a Delete action to the output of a VendorsReportsSearch search operation...
kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket
net/unix/afunix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service system hang by creating an abstract-namespace AFUNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket...
Mandriva Security Advisory MDVSA-2009:301 (kernel)
The remote host is missing an update to kernel announced via advisory MDVSA-2009:301. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Multiple TCP implementations different security vulnerabilities
Multiple security vulnerabilities in different operation sustems caused by resource exhaustions on maintaining TCP states table...
Design/Logic Flaw
The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...
Visual Studio Active Template Library object type mismatch vulnerability
Added: 08/24/2009 CVE: CVE-2009-2494 BID: 35982 OSVDB: 56910 Background Microsoft Visual Studio is a product to assist with software development in the Windows operating system. Visual Studio uses Microsoft Active Template Library ATL, which is a set of template-based C++ classes, to help simplif...
Visual Studio Active Template Library object type mismatch vulnerability
Added: 08/24/2009 CVE: CVE-2009-2494 BID: 35982 OSVDB: 56910 Background Microsoft Visual Studio is a product to assist with software development in the Windows operating system. Visual Studio uses Microsoft Active Template Library ATL, which is a set of template-based C++ classes, to help simplif...