4412 matches found
RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Corruption
RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Corruption by Piotr Bania [email protected] http://www.piotrbania.com Original url and formatting: http://www.piotrbania.com/all/adv/realplayer-heap-corruption-adv.txt Severity: Important/Critical - Potencial remote code executio...
rNote 0.9.7 - 'rnote.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/26140/info rNote is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities may allow an attacker to perform cross-site scripting attacks on...
openSUSE 10 Security Update : samba (samba-1830)
Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication to netbios-name$@realm from host/name@realm; 184450. -...
DWR debug mode is enabled
This gives a potential attacker lots of information about available AJAX request handlers in Confluence...
DWR debug mode is enabled
This gives a potential attacker lots of information about available AJAX request handlers in Confluence...
IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit
Exploit for unknown platform in category remote exploits ======================================================= IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit ======================================================= / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List:...
PT-2007-4751 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Excel version 2003 SP2 Description: The issue is related to an unspecified vulnerability in Microsoft Excel, potentially connected to the sheet name. It may allow remote attackers to have an unknown impact via unspecified vectors...
[slackware-security] libexif
New libexif packages are available for Slackware 10.2, 11.0, and -current to fix a crash and potential security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-4168 Here are the details from the Slackware...
Flaw in about.r OS and Progress version disclosure
about.r OS and Progress version disclosure. Because of poor security in webutil/about.r it is possible to view the OS and the Progress version of a remote webspeed server. First you have to find the messenger execution url. For example: http://yourmachine.com/scripts/cgiip.exe/WService=wsbroker1...
Fedora Core 6 : openoffice.org-2.0.4-5.5.17 (2007-376)
CVE-2007-0239 rhbz228008 potential shell escape problem in some hyperlinks CVE-2007-0238 rhbz226966 potential buffer overflows in calc legacy file format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
KDE Konqueror 3.xIOSlave - FTP PASV Port-Scanning
KDE Konqueror 3.xIOSlave - FTP PASV Port-Scanning source: https://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect...
Particle Blogger 1.2.1 - 'Archives.php' SQL Injection
source: https://www.securityfocus.com/bid/24232/info Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
[Full-disclosure] Apple QuickTime Player Remote Heap Overflow
Apple QuickTime Player Remote Heap Overflow by Piotr Bania [email protected] http://www.piotrbania.com All rights reserved. Severity: Critical - potencial remote code execution. Software affected: Tested on QucikTime 7.1 Windows version, with all newest add-ons. Timeline: 03/09/2006...
Potential integer overflow with text/enhanced mail — Mozilla
Georgi Guninski discovered a potential integer overflow in the code that handles mail formatted as text/enhanced or text/richtext. This could in turn lead to a buffer overflow and potential code execution...
Google Desktop Detection
Google Desktop, a search application for Windows that allows users to easily search for files on the computer, is installed on the remote host. If the 'Advanced Features' or 'Search Across Computers' options of Google Desktop are enabled, some data may be sent to Google's server, potentially...
Microsoft Windows XP2003 - ReadDirectoryChangesW Information Disclosure
Microsoft Windows XP2003 - ReadDirectoryChangesW Information Disclosure // source: https://www.securityfocus.com/bid/22664/info Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker may leverage this issue to gain access to potentially sensitive information...
Mandrake Linux Security Advisory : gtk+2.0 (MDKSA-2007:039)
The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 allows context-dependent attackers to cause a denial of service crash via a malformed image file. CVE-2007-0010 The version of libgtk+2.0 shipped with Mandriva Linux 2007 fails various portions of the lsb-test-desktop test suite, par...
r3-stealer-1.0.pl.txt
!/usr/bin/perl -w SAP 'enserver.exe' file downloader Tested on "SAP Web Application Server Java 6.40" eval DVD Found & coded by Nicob The downloaded file is limited to the first 32 kilobytes Usual port : TCP/3200+SYSNR Exemple : ./r3-stealer-1.0.pl 192.168.2.22 3201 "c:\boot.ini" From MSDN Win2K...
kernel security update
CentOS Errata and Security Advisory CESA-2007:0014 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...
