CVE-2013-0656

The CVE-2013-0656 vulnerability concerns a heap-based buffer overflow in a third-party ActiveX component used by Siemens SIMATIC RF Manager products. Affected are SIMATIC RF Manager 2008 and RF Manager Basic v3.0 and earlier; the overflow arises when processing content from a crafted web site, en...

CVE-2013-0656

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

PT-2013-2506

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC RF-MANAGER versions 2008 and earlier Siemens RF-MANAGER Basic versions 3.0 and earlier Description A buffer overflow issue exists in a third-party ActiveX component. This allows remote attackers to execute arbitrary code via a...

CVE-2013-0656: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

PT-2012-3105

Name of the Vulnerable Software and Affected Versions systemd versions prior to 44 Description The issue concerns the rm rf children function in util.c within the systemd-logind login manager. It allows local users to delete arbitrary files via a symlink attack on unspecified files related to use...

Man-in-the-Middle Remote Attack on Diebold Touch-screen Voting Machine

Man-in-the-Middle Remote Attack on Diebold Touch-screen Voting Machine The Vulnerability Assessment Team VAT at the U.S. Dept. of Energy's Argonne National Laboratory in Illinois has managed to hack a Diebold Accuvote touch-screen voting machine. Voting machines used by as many as a quarter of...

PT-2011-4476

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier Description The issue allows remote attackers to read, modify, or delete arbitrary files. This is achieved through multiple directory traversal vulnerabilities in the service.exe component via...

CVE-2011-3495: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the 1 RF, 2 wF, 3 UF, or 4 NF command...

Ubertooth - An Open Source Bluetooth Test Tool download !

This project was originally unveiled at the recently concluded ShmooCon. It shows a lot of promise and the authors two years of study and experimentation. The name is Ubertooth. Ubertooth is an open source 2.4 GHz wireless development platform suitable for passive bluetooth monitoring. It aims to...

Update Protection against Cisco IOS Administrative Interface HTTP Authentication

Cisco Wireless LAN Controllers WLCs are responsible for system-wide wireless LAN functions, such as security policies, intrusion prevention, RF management, quality of service QoS, and mobility. An attacker with access to the administrative web interface via HTTP or HTTPS may cause the device to...

kernel security and bug fix update

2.6.18-128.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

Linux/x86 - execve("rm -rf /")

No description provided by source. / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global start start: ; execve"/bin/rm", "/bin/rm", "-r", "-f", "/", NULL , NULL push byte 11 pop eax cdq push edx push byte 0x2f mov edi, esp push edx push word 0x66...

linux/x86 rm -rf / attempts to block the process from being stopped

No description provided by source. / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax "\x89\xC1" // mov ecx, eax "\x41" // inc ecx "\xB0\x30" // mov al, 0x30 ;...

linux/x86 - rm -rf / attempts to block the process from being stopped

linux/x86 rm -rf / attempts to block the process from being stopped. Shellcode exploit for linx86 platform / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax...

CVE-2008-1258

CVE-2008-1258 is a cross-site scripting (XSS) vulnerability in the D-Link DI-604 router, affecting prim.htm via the rf parameter. Remote attackers could inject arbitrary web script/HTML through rf. The provided documents confirm the affected product and vulnerability mechanism; no remediation det...

CVE-2008-1258: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter...

CVE-2008-0152

SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service crash via unspecified telnet options, which triggers a NULL pointer dereference. NOTE: the crash is not user-assisted when the server is running in debug mode...

CVE-2008-0152: Improper Restriction of Operations within the Bounds of a Memory Buffer

SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service crash via unspecified telnet options, which triggers a NULL pointer dereference. NOTE: the crash is not user-assisted when the server is running in debug mode...

SeattleLab SLNet RF Telnet服务器空指针引用拒绝服务漏洞

BUGTRAQ ID: 27134 SLNet RF是Windows平台下的Telnet服务器软件。 SLNet RF处理异常的流程存在问题，远程攻击者可能利用此漏洞导致服务器不可用。 如果出现了异常的话SLNet服务器会显示一个消息框，当管理员点击该消息框时服务器会终止（服务器以调试模式运行时会自动终止）。在这种情况下处理telnet选项期间所出现的异常就会导致空指针引用。 SeattleLab SLNet RF = 4.1.1.3758 SeattleLab ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

linux/x86 execve(rm -rf /) shellcode 45 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 execverm -rf / shellcode 45 bytes ============================================= / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global sta...