5623 matches found
Kerio Personal Firewall privilege escalation
Insufficient hooked SSDT calls arguments validation...
Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability
Hello, I would like to inform you about a vulnerability in Sunbelt Kerio Personal Firewall. Description: Sunbelt Kerio Personal Firewall hooks many functions in SSDT and in at least six cases it fails to validate arguments that come from user mode. User calls to NtCreateFile, NtDeleteFile,...
CVE-2006-5070
Affected software: faceStones Personal 2.0.42 and earlier. Vulnerability: PHP remote file inclusion via a URL supplied in GLOBALS[fsinit][objpath] in fsl2/objects/fs_form_links.php. Impact: remote attackers can execute arbitrary PHP code. This is the described vulnerability; no exploitation detai...
CVE-2006-5070
PHP remote file inclusion vulnerability in fsl2/objects/fsformlinks.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfsinitobjpath parameter...
faceStones personal <= v2.0.42 (objpath) Remote File Inclusion Exploit
============================================================================================== faceStones personal = v2.0.42 objpath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor sit...
faceStones personal <= 2.0.42 (fs_form_links.php) File Include Vuln
Exploit for unknown platform in category web applications =================================================================== faceStones personal = 2.0.42 fsformlinks.php File Include Vuln ===================================================================...
faceStones personal <= 2.0.42 (fs_form_links.php) File Include Vuln
No description provided by source. ============================================================================================== faceStones personal = v2.0.42 objpath Remote File Inclusion Exploit ===============================================================================================...
faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion
============================================================================================== faceStones personal = v2.0.42 objpath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor sit...
faceStones personal 2.0.42 - fs_form_links.php File Inclusion
faceStones personal 2.0.42 - fsformlinks.php File Inclusion ============================================================================================== faceStones personal = v2.0.42 objpath Remote File Inclusion Exploit...
CVE-2006-4855
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...
CVE-2006-4855
The CVE-2006-4855 family concerns the Symantec Norton products (Norton Personal Firewall 2006 9.1.0.33 and related Norton Personal Firewall/Internet Security/AntiVirus/Symantec client products; Symantec Host) where the \Device\SymEvent driver (and related SYMTDI.SYS) is vulnerable to local privil...
Symantec Norton Insufficient validation of 'SymEvent' driver input buffer
Hello, I would like to inform you about a vulnerability in Norton Personal Firewall. Description: Norton insufficiently protects its driver 'DeviceSymEvent' against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send...
Kerio Firewall 2.1.4 Authentication Packet Overflow
This module exploits a stack buffer overflow in Kerio Personal Firewall administration authentication process. This module has only been tested against Kerio Personal Firewall 2 2.1.4. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2006-4266
CVE-2006-4266 affects Norton Personal Firewall 2006 (at least 9.1.0.33) where the product does not adequately protect Norton registry keys. The issue allows a local attacker to influence Norton by using RegSaveKey/RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners (demonstrated with ...
Kaspersky Anti-Hacker personal firewall unstealthy stealth mode
Kaspersky personal firewall 1.8.180 in "stealth mode" configuration doesnt detect nor block timestamp and network block ICMP request. They still call it a stealth mode feature, yeah sure ; Try: nmap -sP -PE IP namp -sP -PM IP...
CVE-2006-4025
SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the 1 bdayday, 2 bdaymonth, and 3 bdayyear parameters in the personal section...
Dish dish intrusion issues face-to-face-the vulnerability warning-the black bar safety net
Dish dish intrusion issues face-to-face I was too lazy to go to school when you've never done the job to only one of the advantages of the love want to the problem in order to IT168, the development had to move to even have stainless candle of stupid hands. From that about itI found a lot of peop...
CVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service crash and bypass protection mechanisms by calling CreateRemoteThread...
CVE-2006-3787
The CVE-2006-3787 issue affects Sunbelt Kerio Personal Firewall 4.3.x prior to 4.3.268 where kpf4ss.exe does not properly hook CreateRemoteThread. This allows a local user to trigger a crash (denial of service) and bypass protection mechanisms by calling CreateRemoteThread. The vulnerability is d...
CVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service crash and bypass protection mechanisms by calling CreateRemoteThread...