CVE-2013-4057

CVE-2013-4057 affects IBM InfoSphere Information Server XML Pack (versions 8.5.x up to FP3, 8.7.x up to FP2, and 9.1.x up to 9.1.2.0). The root cause is insufficient CSRF protections, allowing an attacker to trick a logged-in user into performing actions via a malicious URL, potentially hijacking...

CVE-2013-6205

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6205

CVE-2013-6205 affects HP Rapid Deployment Pack (RDP) and HP Insight Control Server Deployment. The HP security bulletin (HPSBGN02970 rev.1) documents multiple remote vulnerabilities impacting confidentiality, integrity, and availability, with CVE-2013-6205 rated CVSS 2.0 base score 4.1 (AV:L/AC:M...

CVE-2013-6206

HP Rapid Deployment Pack (RDP) and HP Insight Control Server Deployment are affected by CVE-2013-6206. The vulnerability enables remote attackers to obtain sensitive information, modify data, or trigger a denial of service via unknown vectors. CVSS v2 base score is 9.0 (HIGH) with Network attack ...

CVE-2013-6206

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

rubygem-actionpack: Action View string handling denial of service

actionpack/lib/actionview/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service memory consumption by including these strings in heade...

Microsoft Windows Kernel 'Win32k.sys' CVE-2014-0300 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges and gain access to kernel memory. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing...

The browser cache is Vary broken

Jake, why are your blog posts always so depressing? -- Domenic Denicola @domenic Well, I wouldn't want to disappoint… TL;DR If you use "Vary" to negotiate content, the responses will fight for the same cache space. Additionally, IE ignores "max-age" and Safari is buggy. Content negotiation using...

Python - socket.recvfrom_into() Remote Buffer Overflow

Python - socket.recvfrominto Remote Buffer Overflow !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-19...

Lotus Quickr for Domino qp2.dll ActiveX Control Unspecified Stack Overflow

There is an unspecified, stack-based buffer overflow vulnerability in the Lotus Quickr for Domino qp2.dll ActiveX control. By tricking a victim into opening a specially crafted web page, an attacker can leverage this flaw to potentially execute arbitrary code, subject to the user's privileges. C...

Microsoft Windows SMB Registry : Windows 8.1 / Server 2012 R2 Service Pack Detection

It was possible to determine the service pack version of the Windows 8.1 / Server 2012 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72543; scriptversion"1.5";...

Description of the SharePoint Workspace 2010 update 2760601: February 11, 2014

None None...

MP3Info 0.8.5a - Buffer Overflow

MP3Info 0.8.5a - Buffer Overflow Waste of CPU clock N2 Exploit for: mp3info! Latest version Author: jsacco - [email protected] Vendor: http://ibiblio.org/mp3info/ No-one-cares-about programs! junk = "\x90\x90\x90\x90"8 shellcode =...

IBM WebSphere Application Server 7.0 < Fix Pack 31 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 31 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - A flaw in the modrewrite module of Apache HTTP Server potentially allows a remote attacker to execute arbitrary code via...

IBM WebSphere Application Server 8.0 < Fix Pack 8 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 before Fix Pack 8 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - A CSRF vulnerability exists in IBM WebSphere Application Server due to improper validation of portlets in the Administrative...

CVE-2014-0259

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

Memory corruption

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

Memory corruption

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of...

DSquare Exploit Pack: D2SEC_LOREX

Name| d2seclorex ---|--- CVE| CVE-2014-1201 Exploit Pack| D2ExploitPack Description| Lorex Edge INetViewX ActiveX Buffer Overflow Vulnerability Notes|...

CVE-2014-0259

CVE-2014-0259 : Word Memory Corruption Vulnerability affecting Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 via crafted Office documents. Root cause is memory corruption when parsing crafted files, enabling remote code execution and potential DoS. Affected products/themes align with ...