TYPSoft FTP Server 1.1 - 'APPE' Remote Denial of Service

!/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS: Windows 7 REQUIRES VALID CREDENTIALS. Luckily,...

libpurple -- Remote DoS via an MSN OIM message that lacks UTF-8 encoding

US-CERT reports: The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

PT-2012-3427

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.0.14 Description A double free vulnerability in libgnutls allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted...

HP-UX PHCO_42179 : HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02700 SSRT100506 rev.2)

s700800 11.31 VRTS 5.0.1 VRTSobc33 Command Patch : Potential security vulnerabilities have been identified in HP-UX running the Veritas Enterprise Administrator VEA, which comes bundled with VxVM. The vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitra...

CVE-2011-3041

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes...

CVE-2011-3043

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox aka flexible box in conjunction with the floating of elements...

CVE-2011-3044

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements...

PT-2012-1606

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.65 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to cause a denial of service or possibly have...

CVE-2011-1385: Undefined Security Weakness

IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service system crash via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194...

CVE-2012-0331: Undefined Security Weakness

Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319...

CVE-2012-0368: Undefined Security Weakness

The administrative management interface on Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service device crash via a malformed URL in an HTTP request, aka B...

IBM solidDB 6.5 < 6.5.0.8 Interim Fix 6 Redundant WHERE Clause Select Statement Parsing Remote DoS

According to its version number, the solidDB install on the remote host is affected by a denial of service vulnerability due to a flaw in the way the application handles 'SELECT' statements containing a redundant WHERE condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Core FTP Server 1.2 Build 422 DoS exploit

Exploit for windows platform in category dos / poc Exploit Title: Core FTP Server 1.2 Build 422 remote DoS exploit Author: dmnt Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Core FTP Server 1.2 Build 422 Tested on: Windows 7 CVE : 0 day xdmnt 2012 -- coding:...

CVE-2011-3026

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation...

CVE-2011-3026: Integer Overflow or Wraparound

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation...

CVE-2012-0789

Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service memory consumption by triggering many strtotime function calls, which are not properly handled by the phpdateparsetzfile cache...

PT-2012-1224

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.9 Description The issue is related to a memory leak in the timezone functionality, which can be exploited by remote attackers to cause a denial of service due to memory consumption. This is achieved by triggering many...

PT-2012-2573

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 10.x through 10.0 Thunderbird versions 10.x through 10.0 SeaMonkey version 2.7 Description The issue is related to a use-after-free vulnerability that can be triggered by vectors causing failure of an...

PT-2012-1766

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.46 Description A buffer overflow issue exists in the locale implementation, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts via unknown vectors...

PT-2012-1776

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.46 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability that can be triggered via vectors related to the layout of SVG documents, potentially...