CVE-2008-0674

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255...

CVE-2008-0571: Cross-Site Request Forgery (CSRF)

The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery CSRF attacks and manipulate points...

Insider revealed the thunder catch the chicken to achieve a method and prevention tips-vulnerability warning-the black bar safety net

The world's largest sorrow, than they are to harm you, unbeknownst to you also for him too beholden to. Such absurd things, only in the TV series appear in? You ever think of yourself will become like that? If you don't believe, after reading this article the quasi surprise you! Thundercatch the...

Boa webserver Intersil extension (multiple wireless access points) buffer overflow

Buffer overflow in HTTP Basic authentication allows to access device without password...

About Posion Ivy 2.3.0 free kill points idea-vulnerability warning-the black bar safety net

Originally wanted to send to the original area, but to see other places also have the discussion of, and the method is certainly a lot, so I'll put here, please have a idea of the friends in here big comments! Today in foreign countries, the IRC saw a few foreigners in the discussion of the PI2. ...

freetype integer overflow

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

DEBIAN-CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability

Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Symantec Norton Ghost is a backup and recovery application designed to allow users to completely...

CVE-2007-2075

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

Design/Logic Flaw

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

CVE-2007-2075

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

CVE-2007-2075: Undefined Security Weakness

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

Hardcoded credentials

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192...

CVE-2007-2040

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192...

CVE-2007-2040

This CVE (CVE-2007-2040) affects Cisco Aironet 1000/1500 Lightweight Access Points, with hard-coded credentials allowing an attacker with physical access to perform arbitrary actions on the device. Affected firmware versions are before 3.2.185.0 for 1000/1500 lightweight APs and before 4.0.206.0 ...

CVE-2007-2040: Undefined Security Weakness

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192...

Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points Advisory ID: cisco-sa-20070412-wlc http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml Revision 1.0 For Public...

Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System Advisory ID: cisco-sa-20070412-wcs http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml Revision 1.0 For Public Release 2007 April 12 1600 UTC GMT -...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...

FreeBSD -- Jail rc.d script privilege escalation

Problem Description: In multiple situations the host's jail rc.d8 script does not check if a path inside the jail file system structure is a symbolic link before using the path. In particular this is the case when writing the output from the jail start-up to /var/log/console.log and when mounting...