Crush FTP 5 - 'APPE' Remote JVM Blue Screen of Death (PoC)

Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env python import socket host = rawinput"Type...

Windows File Level Restore causes Windows crash (the “blue screen” error) on the Veeam Backup server.

Challenge During File Level Restore, the Windows "blue screen" error occurs on the Veeam Backup Server. You cannot restore any guest OS files and Veeam Backup server crashes. Cause When restoring files with Windows File Level Restore from a backup or a replica, the Veeam Backup server crashes wit...

Apple Safari Update Fixes 58 Bugs, Adds Sandboxing

Along with the release of their new Lion OS X, Apple has issued a new version of its Safari browser for Mac and Windows users, pushing version 5.1 and 5.0.6 to patch a boatload of security holes, some of which are critical. Fifty-eight security vulnerabilities in total are addressed in the update...

Centralia SQL Injection

Exploit : Centralia Sql Injenction Date : 16 July 2011 Author : Netrondoank Version : n/a Googel DorK : inurl:showcat.asp?id= Home : www.indotek.or.id Email: [email protected] + Exploit 1 Centralia showcat.asp?/display.asp? Sql Injenction - http://site/showcat.asp?id=sqli -...

HTC HD2 Mobile Phone - Lock Screen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - Lock Screen Keyboard Bypass Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 185 Product & Service Introduction: =============================== Der HTC HD2 liefert Ihnen ein...

HTC HD2 Mobile Phone - Lock Screen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - Lock Screen Keyboard Bypass Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 185 Product & Service Introduction: =============================== Der HTC HD2 liefert Ihnen ein...

When you open the nworks Web UI in a browser, you see a blank screen.

When you open the nworks Web UI in a browser, you see a blank screen instead of the logon screen/management screen. You may also see a Java exception stating that you need to add the site to the Trusted Sites zone...

Chrome Stable Release

The Google Chrome team is happy to announce the release of Chrome 12 to the Stable Channel for all platforms. Chrome 12.0.742.91 includes a number of new features and updates, including: Hardware accelerated 3D CSS New Safe Browsing protection against downloading malicious files Ability to delete...

Movable Type vulnerable to cross-site scripting

Overview Movable Type contains a cross-site scripting vulnerability. Movable Type, a web log system from Six Apart KK, contains a cross-site scripting vulnerability due to an issue in the management screen. This vulnerability is different than the previous vulnerabilities disclosed on JVN. Takesh...

Mandriva Update for gnome-screensaver MDVSA-2011:093 (gnome-screensaver)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Multiple Buffalo routers vulnerable to cross-site request forgery

Overview Multiple routers provided by Buffalo contain a cross-site request forgery vulnerability. Multiple routers provided by Buffalo have a management screen that allows users to modify settings. These routers contain a cross-site request forgery vulnerability due to an issue in the management...

CVE-2011-1324: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for...

Fedora Update for kdeaccessibility FEDORA-2011-5200

Check for the Version of kdeaccessibility OpenVAS Vulnerability Test Fedora Update for kdeaccessibility FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

[SECURITY] Fedora 14 Update: kdeaccessibility-4.6.2-1.fc14

Included with this package are: kmag: a screen magnifier kmousetool: a program for people whom it hurts to click the mouse kmouth: program that allows people who have lost their voice jovie: text to speech support...

[SECURITY] Fedora 15 Update: kdeaccessibility-4.6.2-1.fc15

Included with this package are: kmag: a screen magnifier kmousetool: a program for people whom it hurts to click the mouse kmouth: program that allows people who have lost their voice jovie: text to speech support...

Fedora Update for tmux FEDORA-2011-5167

Check for the Version of tmux OpenVAS Vulnerability Test Fedora Update for tmux FEDORA-2011-5167 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for tmux FEDORA-2011-5156

Check for the Version of tmux OpenVAS Vulnerability Test Fedora Update for tmux FEDORA-2011-5156 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

JVN#50505257: Multiple Buffalo routers vulnerable to cross-site request forgery

Multiple routers provided by Buffalo have a management screen that allows users to modify settings. These routers contain a cross-site request forgery vulnerability due to an issue in the management screen. Impact If a user views a malicious page while logged into the management screen, settings...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...

CVE-2011-0760

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...