CVE-2007-3362

ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to 1 cause a denial of service call disruption and device hang via a SIP message with a malformed header and 2 cause a denial of service call disruption, false ring indication, and...

LeadTools Raster Variant (LTRVR14e.dll) Remote File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/21/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bLeadTools Rast...

VMware Workstation共享文件夹目录遍历漏洞

VMware Workstation是一款非常流行的虚拟PC机软件。 VMware Workstation的实现上存在漏洞，远程攻击者可能利用此漏洞非授权访问系统文件。 VMware Workstation的共享文件夹功能允许与虚拟的guest系统共享物理的host系统。由于验证文件名是否安全的代码中的漏洞，攻击者或guest系统中的恶意代码通过目录遍历读写主机系统中的文件。 VMWare VMWare Workstation 5.5.3 build 34685 临时解决方法： 禁用“共享文件夹”功能。 厂商补丁： VMWare ------...

VMware多个拒绝服务漏洞

VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare中存在多个拒绝服务漏洞，具体如下： 1 虚拟机进程（VMX）的ACPI实现在收集有关虚拟机运行状态信息时存在错误，可能导致进程读取无效的内存位置。 2 VMX储存某些畸形配置数据时的错误可能导致guest操作系统拒绝服务。 3 在Windows guest操作系统中处理通用保护错误（GPF）中的漏洞可能导致Windows虚拟机崩溃。 4 在64位主机系统上调试64位Windows guest操作系统中的应用程序时可能导致被破坏的栈指针或内核bugcheck。 VMWar...

Internet cafe management software reproduction of vulnerability-vulnerability warning-the black bar safety net

Internet cafe management software is again exposed with the accounting loopholes, and this vulnerability than six months ago that the more concealed, by the operation, can achieve one hour of money for unlimited Internet access. Reported material said, in the stone floor of the bridge all the...

F-Secure Anti-Virus Client Security本地格式串处理漏洞

F-Secure Anti-Virus Client Security是PC平台上的实时病毒监测和防护系统，支持所有WINDOWS系统。 F-Secure Anti-Virus Client Security在处理Management Server名称字段时存在格式串处理漏洞，如果攻击者在Communication设置的Management Server名称字段中提供了特制格式串的话，就可以读写任意内存，并可以导致拒绝服务。 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02...

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Php-Stats 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$str...

PHP-Stats 0.1.9.1b - PC-REMOTE-ADDR SQL Injection

PHP-Stats 0.1.9.1b - PC-REMOTE-ADDR SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

PHP-Stats 0.1.9.1b - 'PC-REMOTE-ADDR' SQL Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...

Security Best Practice: Domains Block List Protection - Blocking LogMeIn

LogMeIn is a remote control application that provides access to any Windows PC from anywhere in the world. It only requires a computer connected to the Internet. The user can remotely access a target computer and have a full desktop view and complete control of everything on it, including: Remote...

CVE-2006-7129

ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files...

CVE-2006-7129

CVE-2006-7129 concerns ISS BlackICE PC Protection 3.6 cpj and possibly earlier versions. The issue allows local users to bypass the protection scheme by calling ZwDeleteFile to delete the critical filelock.txt, which stores information about protected files. The root cause is tampering with the f...

Breakthrough Proactive Defense registry monitoring review(updated)-vulnerability warning-the black bar safety net

Currently active Defense concept has been firmly established, many antivirus, software, fire protection, and HIPS are having a registry monitoring function, to prevent from startup items and IE-related key value is modified, to guard against viruses Trojans and malware and other malicious program...

iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability

Trend Micro TmComm Local Privilege Escalation Vulnerability iDefense Security Advisory 02.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2007 I. BACKGROUND The Trend Micro AntiVirus scan engine is widely relied upon to provide AntiVirus capabilities to desktop, server, and...

CVE-2006-6902

Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrative access aka Remote Root via unspecified vectors...

CVE-2006-6902

Technical details about CVE-2006-6902 are not publicly available in the provided documents. The records describe an unspecified vulnerability in the Bluetooth stack of Windows Mobile Pocket PC edition, with no vectors, affected versions, or fixes detailed. Monitor for updates.

Microsoft Windows Manifest File Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...

Microsoft Windows SNMP Service Remote Code Execution Vulnerability

Description Microsoft Windows SNMP service is prone to a memory-corruption vulnerability because the software fails to properly bounds-check user-supplied network data before copying it to an insufficiently sized memory buffer. Exploiting this issue allows remote attackers to execute arbitrary...