7940 matches found
CVE-2011-3320
CVE-2011-3320 concerns the Web Administrator component of GE Intelligent Platforms Proficy Historian (4.x and earlier). The vulnerability arises from lack of server-side validation of query string parameters, enabling an attacker to inject and execute arbitrary client-side scripts via specially c...
CVE-2011-1919
Vulnerability overview (CVE-2011-1919) : GE Intelligent Platforms Proficy Applications (pre-4.4.1 SIM 101 and pre-5.x before 5.0 SIM 43) contains a stack-based buffer overflow when processing crafted TCP messages. The affected components are Proficy Server Manager (PRProficyMgr.exe), Proficy Serv...
CVE-2011-1918
CVE-2011-1918 is a stack-based buffer overflow in the GE Intelligent Platforms Proficy Historian Data Archiver (ihDataArchiver.exe) that processes TCP/IP messages on port 14000. This remote vulnerability could crash the daemon or allow arbitrary code execution under the service account, affecting...
PT-2011-3474
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions prior to 3.5 SIM 17 GE Intelligent Platforms Proficy Historian versions 4.x prior to 4.0 SIM 12 Description The issue is related to a stack-based buffer overflow in the Data Archiver service,...
PT-2011-4388
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions 4.x and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters. Recommendations For GE...
CVE-2011-1919: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...
PT-2011-3475
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Applications versions prior to 4.4.1 SIM 101 GE Intelligent Platforms Proficy Applications versions 5.x prior to 5.0 SIM 43 Description The issue is related to multiple stack-based buffer overflows that can be...
CVE-2011-1918: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic...
CVE-2011-3320: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2011-4097
Integer overflow in the oombadness function in mm/oomkill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service memory consumption or process termination by using a certain large amount of memory...
Stuxnet's Son "Duqu" Removal Tool released by Bitdefender
Stuxnet's Son "Duqu " Removal Tool released by Bitdefender Rootkit.Duqu is a new e-threat that combines the technology of the military-grade Stuxnet with an advanced keylogger and backdoor application. Due to its rootkit technology, the piece of malware can stay hidden from the user, the operatin...
crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash
cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...
Hash Code Cracker V 1.2 Released ~ Password Cracking from BreakTheSecurity
Hash Code Cracker V 1.2 Released Password Cracking from BreakTheSecurity BreakTheSecurity is proud to release the Hash Code Cracker Version 1.2. Our latest release supports Online Cracking function. Description: This password cracker is developed for PenTesters and Ethical hackers. Please Use thi...
Virus removal website compromised to serving malware
Virus removal website compromised to serving malware One of the Famous Virus Removal Service website : laptopvirusrepair.co.uk is compromised and Hacker is Serving Malware on the website. In above screenshot Avira detects the JS/Blacole.psak Java script Virus hosted on the site. The snippet of co...
CVE-2011-2428
Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service browser crash via unspecified vectors, related to a "logic error issue."...
CVE-2011-2430
Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."...
[SECURITY] Fedora 14 Update: audacious-plugins-2.4.5-4.fc14
This package provides essential plugins for the Audacious audio player. Audacious is an advanced audio player. It is free, lightweight, based on GTK2, runs on Linux and many other nix platforms and is focused on audio quality and supporting a wide range of audio codecs. It still features an...
CVE-2011-3420
Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.157 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors...