CVE-2013-5762

Technical details for CVE-2013-5762 are not publicly available in the provided documents. Monitor for updates; no vulnerability specifics (product, version, impact, or fix) are disclosed here.

Scientific Linux Security Update : ccid on SL5.x i386/x86_64 (20130930)

An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon root, by default, by inserting a...

Scientific Linux Security Update : ccid on SL6.x i386/x86_64 (20130221)

An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon root, by default, by inserting a...

ccid security update

CentOS Errata and Security Advisory CESA-2013:0523 An updated ccid package that fixes one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS...

RedHat Update for ccid RHSA-2013:0523-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Low: Red Hat Security Advisory: ccid security and bug fix update

An updated ccid package that fixes one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Online Store ED-SC V2. 1 arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

This vulnerability for a long time,but in the online to find a to find also did not find someone mentioned,so it is still published out and share with you. I am not a programmer,so the code has no way to explain,please forgive me! Online Store ED-SC V2. 1 默认 后台 路径 www.xxx.com/admins 默认 上传 路径...

Open-Redirect Vulnerability, Fake Government URLs Duping Users

Spammers have recently taken advantage of an open-redirect vulnerability to phish users and trick them into clicking through links that appear to be coming from government .gov URLs. The scam relies on a malformed series of URLs that appear to be coming from 1.USA.gov, a collaboration between...

Smartfren Connex EC 1261-2 UI OUC - Local Privilege Escalation

Smartfren Connex EC 1261-2 UI OUC - Local Privilege Escalation ========================================================================== Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability ==========================================================================...

linux/x86 execve(/bin/dash) 42 bytes

/ linux/x86 execve/bin/dash 42 bytes Author : X-h4ck email protected, email protected www.pirate.al , www.flashcrew.in Greetz : mywisdom - Danzel - Wulns - IllyrianWarrior- Ace - M4yh3m - Saldeath ev1lut1on - Lekosta - Pretorian - bi0 - Slimshaddy - d3trimentaL CR - Hack-Down - H3ll - d4ntesA -...

FreeBSD Ports: kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. VID 6d21a287-fce0-11e0-a828-00235a5f2c9a OpenVAS Vulnerability Test $ Description: Auto generated from VID 6d21a287-fce0-11e0-a828-00235a5f2c9a Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

TORCS 1.3.2 - .xml File Buffer Overflow SafeSEH Evasion

TORCS 1.3.2 - .xml File Buffer Overflow SafeSEH Evasion / Exploit Title: TORCS Research Team Division Author: Andres Gomez and David Mora a.k.a Mighty-D ... Pwn and beans! Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.2 Vendor notified: 03/02/2012 Tested on: Windows XP Service...

CVE-2011-3365

The KDE SSL Wrapper KSSL API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

SC Agency SQL Injection

By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : SC Agency SQL Injection Vulnerability Vendor : http://www.stikchikagency.co.uk Author : CR9 Home : Http://Nopotm.ir Archive : http://CR9Exploits.zio.ir Email :...

CoolPlayer Portable 2.19.2 - Local Buffer Overflow

CoolPlayer Portable 2.19.2 - Local Buffer Overflow CoolPlayer+ Portable Buffer Overflow Version: 2.19.2 Author: Securityxxxpert Date Submitted: May 16, 2011 Download Link: http://download.cnet.com/CoolPlayer-Portable/3000-21394-75448619.html Tested on: Windows Xp Sp3 print...

Mandriva Update for kdenetwork4 MDVSA-2011:081 (kdenetwork4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : kdenetwork4 (MDVSA-2011:081)

A vulnerability has been found and corrected in kdenetwork4 : Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. dot dot in the na...

CVE-2011-1586

CVE-2011-1586 details (from provided docs): A directory traversal vulnerability in KDE’s KGet component (KGetMetalink::File::isValidNameAttr in ui/metalinkcreator/metalinker.cpp) affects KDE SC 4.6.2 and earlier. The issue allows remote attackers to create arbitrary files by using a .. (dot dot) ...

CVE-2011-1586

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. dot dot in the name attribute of a file element in a metalink file. NOTE: this...

Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2011:075)

A vulnerability has been found and corrected in kdelibs4 : Cross-site scripting XSS vulnerability in the KHTMLPart::htmlError function in khtml/khtmlpart.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL correspondin...