DSA-1841-2 git-core - correct build failure introduced in DSA-1841-1

Bulletin has no description...

CamShot 1.2 - Overwrite (SEH)

CamShot SEH overwrite by tecnik import socket, sys if lensys.argv!=2: print "Usage: camshot.py " exit s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectsys.argv1,80 print "Sending Exploit to:" + sys.argv1 GET request + overflow string request ="GET /" request...

CentOS 3 / 4 / 5 : gzip (CESA-2010:0061)

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

[SECURITY] Fedora 11 Update: ruby-1.8.6.383-6.fc11

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[SECURITY] Fedora 12 Update: ruby-1.8.6.383-6.fc12

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

J 6.02.023 Array Overrun

J 6.02.023 Array Overrun code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 08.01.2010 CVE: CVE-2009-0689 CWE: CWE-119 Risk: High Remote: Yes Affected Software: - J 6.02.023 Array Overrun code execution NOTE: Prior versions may also ...

BigAnt Server 2.52 - Remote Buffer Overflow (2)

BigAnt Server 2.52 - Remote Buffer Overflow 2 !/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer=...

PHP Update Fixes Bugs, Closes Holes

The PHP developers have released version 5.2.12 of their popular programming language, fixing over 60 bugs mainly to increase stability, but also closing some security holes. Read the full article. The H Security...

[SECURITY] Fedora 10 Update: ruby-1.8.6.368-2.fc10

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

Microsoft Visual Basic 6.0 VBP Project File Handling Buffer Overflow (CVE-2007-4776)

Microsoft Visual Basic is a tool for productively building type-safe and object-oriented applications. It allows developers to create a wide range of Windows, Web, mobile and Office applications. Visual Basic VB is an event driven programming language and associated development environment from...

[SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1938-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 23, 2009 http://www.debian.org/security/faq -...

Oracle Database Server ctxsys.driload Access Validation (CVE-2004-0637)

Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...

New pidgin packages fix arbitrary code execution

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1932-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 08, 2009...

XLPD 3.0 - Remote Denial of Service

XLPD 3.0 - Remote Denial of Service Application: XLPD 3.0 Remote DoS Platforms: Windows XP Professional SP2 crash: YES Exploitation: remote DoS Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...

PHP 5.2.10及之前版本存在多个安全漏洞

Bugraq ID: 36449 PHP是一款流行的网络编程语言。 PHP存在多个未明安全问题，具体如下： -phpopensslapplyverificationpolicy中存在证书校验问题。 -imagecolortransparent对颜色索引缺少充分过滤检查。 -对exif处理缺少充分的过滤检查。 PHP PHP 5.2.10 PHP PHP 5.2.9 -2 PHP PHP 5.2.9 PHP PHP 5.2.8 PHP PHP 5.2.7 PHP PHP 5.2.6 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2....

Debian: Security Advisory (DSA-1886-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Parsing JS Trojan attack with anti-bug warning-the black bar safety net

Web hang horse has now become hackers launched cyber attacks the main one way, and therefore protect against Web security threats, it is particularly important, this article will introduce some of the common JS hung it to the phenomenon and how to respond. Trojan has always been a hack of adept...

CVE-2008-7122

Multiple insecure method vulnerabilities in an ActiveX control in epRegPro.ocx in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the 1 About, 2 CreateKey, 3 DeleteBranch, 4 DeleteKey, 5 DeleteValue, 6 EnumKeys, 7 EnumValues, 8 QueryType, 9...

CVE-2008-7122

Multiple insecure method vulnerabilities in an ActiveX control in epRegPro.ocx in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the 1 About, 2 CreateKey, 3 DeleteBranch, 4 DeleteKey, 5 DeleteValue, 6 EnumKeys, 7 EnumValues, 8 QueryType, 9...

ProShow Producer / Gold 4.0.2549 (.psh) Universal BOF Exploit (SEH)

Exploit for unknown platform in category local exploits =================================================================== ProShow Producer / Gold 4.0.2549 .psh Universal BOF Exploit SEH =================================================================== !/usr/bin/perl by hack4love ProShow...