Vulnerability in OpenSSL - DTLS recursion flaw

By sending an invalid DTLS handshake to an OpenSSL DTLS client the code can be made to recurse eventually crashing in a DoS attack. Only applications using OpenSSL as a DTLS client are affected. Found by Imre Rad Search-Lab Ltd...

McKesson ActiveX File/Environmental Variable Enumeration

Exploit for windows platform in category remote exploits McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member...

McKesson Active-X 11.0.10.38 Enumeration

McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member OpenTextFile from DXVLauncherLib.McKLauncher and returns ...

McKesson - ActiveX FileEnvironmental Variable Enumeration

McKesson - ActiveX FileEnvironmental Variable Enumeration McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member...

McKesson - ActiveX File/Environmental Variable Enumeration

McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member OpenTextFile from DXVLauncherLib.McKLauncher and returns ...

SCADA and ICS Security Session Moderator Tiffany Rad

Tiffany Rad, who moderated the ICS security track, talked about the restrictions that laws such as the DMCA can place on security researchers looking at new systems...

Secunia Research: Microsoft Excel Record Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 12/10/2010 - Microsoft Excel Record Parsing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Rad User Manager Cross Site Scripting

Exploit Title: Rad User Manager XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Version: 2.90 Tested on: Debian Linux, Apache2, PHP5, MySQL5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Rad User Manager XSS Vulnerabilities

Exploit for php platform in category web applications ==================================== Rad User Manager XSS Vulnerabilities ==================================== :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Rad...

Use-after-free crash in HTML parser — Mozilla

Security researcher Alin Rad Pop of Secunia Research reported that the HTML parser incorrectly freed used memory when insufficient space was available to process remaining input. Under such circumstances, memory occupied by in-use objects was freed and could later be filled with attacker-controll...

Secunia Research: HP Power Manager "formExportDataLogs" Directory Traversal

====================================================================== Secunia Research 20/01/2009 - HP Power Manager "formExportDataLogs" Directory Traversal - ====================================================================== Table of Contents Affected...

Fedora Core 10 FEDORA-2009-11499 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory FEDORA-2009-11499. OpenVAS Vulnerability Test $Id: fcore200911499.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11499 libsndfile Authors: Thomas Reinke Copyright: Copyright ...

openSUSE Security Update : mozilla-nspr (mozilla-nspr-1510)

This update fixes a bug in the Mozilla NSPR helper libraries, which could be used by remote attackers to potentially execute code via JavaScript vectors. MFSA 2009-59 / CVE-2009-1563: Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to...

Secunia Research: Mozilla Firefox Floating Point Memory Allocation Vulnerability

====================================================================== Secunia Research 28/10/2009 - Mozilla Firefox Floating Point Memory Allocation Vulnerability - ====================================================================== Table of Contents Affected...

DEBIAN-CVE-2009-3111

The raddecode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service radiusd crash via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to...

Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow

====================================================================== Secunia Research 15/04/2009 - DivX Web Player Stream Format Chunk Buffer Overflow - ====================================================================== Table of Contents Affected...

RedHat Update for samba RHSA-2008:0288-01

Check for the Version of samba OpenVAS Vulnerability Test RedHat Update for samba RHSA-2008:0288-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Secunia Research: Samba "receive_smb_raw()" Buffer Overflow Vulnerability

====================================================================== Secunia Research 28/05/2008 - Samba "receivesmbraw" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow

====================================================================== Secunia Research 08/04/2008 - Adobe Flash Player "Declare Function V7" Heap Overflow - ====================================================================== Table of Contents Affected...

GLSA-200712-10 : Samba: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200712-10 Samba: Execution of arbitrary code Alin Rad Pop Secunia Research discovered a boundary checking error in the sendmailslot function which could lead to a stack-based buffer overflow. Impact : A remote attacker could send ...