Airlock WAF 4.2.4 - Overlong UTF-8 Sequence Bypass

Airlock WAF 4.2.4 - Overlong UTF-8 Sequence Bypass SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Airlock WAF overlong UTF-8 sequence bypass product: Airlock vulnerable version: = 4.2.4 without hotfix HF4213 fixed...

Apache Struts 2.2.1.1 Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Apache Struts %q This module exploits...

SOL13605 - FirePass sudo vulnerability - CVE-2012-2053

Recommended action F5 recommends that you upgrade to the latest FirePass hotfix to ensure that you have the latest security updates. Supplemental Information CERT advisory regarding CVE-2012-2053 SOL167: Downloading software and firmware from F5 SOL10322: FirePass hotfix matrix SOL3430: Installin...

CVE-2012-2149 OpenOffice.org memory overwrite vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-2149 OpenOffice.org memory overwrite vulnerability Reference: http://www.openoffice.org/security/cves/CVE-2012-2149.html Severity: Important Vendor: The Apache Software Foundation Versions Affected: OpenOffice.org 3.3 and 3.4 Beta, on all...

SOL13463 - FirePass SQL injection vulnerability - CVE-2012-1777

Recommended action To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. F5 strongly recommends installing FirePass HF-377712-1 to address this vulnerability. Supplemental Information CERT advisory regarding...

SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2

SEC Consult Vulnerability Lab Security Advisory 20120104-0 ======================================================================= title: Multiple critical vulnerabilities in Apache Struts2 product: Apache Struts2 OpenSymphony XWork OpenSymphony OGNL vulnerable version: 2.3.1 and below fixed...

WordPress 3.1.3 - SQL Injection

WordPress 3.1.3 - SQL Injection SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions fixed version:...

WordPress 3.1.3 / 3.2-RC1 SQL Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions fixed version: 3.1.4/3.2-RC3 impact: Medium...

Libmodplug ReadS3M Stack Overflow

Exploit for multiple platform in category dos / poc SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Libmodplug ReadS3M Stack Overflow product: Libmodplug library vulnerable version: 0.8.8.1 fixed version: 0.8.8.2 impac...

SonicWALL SSL-VPN - NetExtender ActiveX Control Buffer Overflow (Metasploit)

$Id: sonicwalladdrouteentry.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Xerox WorkCentre 5665/5675/5687 Backdoor

SEC Consult Security Advisory ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed version:...

Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues

Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues Title : Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues VUPEN ID : VUPEN/ADV-2009-1815 CVE ID : GENERIC-MAP-NOMATCH CWE ID : CWE-119 Rated as : Critical Remotely Exploitable : Yes Locally Exploitable : Yes Release Dat...

[SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-0580: Tomcat information disclosure vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.1.0 to 4.1.39 Tomcat 5.5.0 to 5.5.27 Tomcat 6.0.0 to 6.0.18 The unsupported Tomcat 3.x, 4.0.x and 5.0.x version...

SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability

SEC Consult Security Advisory 20090525-4 ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions...

SonicOS Format String

SEC Consult Security Advisory ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions homepage:...

SonicWALL Global Security Client Privilege Escalation

SEC Consult Security Advisory ========================================================================== title: SonicWALL Global Security Client Local Privilege Escalation Vulnerability program: SonicWALL Global Security Client vulnerable version: 1.0.0.15 and possibly other versions homepage:...

SEC Consult SA-20090525-0 :: Nortel Contact Center Manager Server Authentication Bypass Vulnerability

SEC Consult Security Advisory 20090525-0 ========================================================================== title: Nortel Contact Center Manager Server Authentication Bypass program: Nortel Contact Center Manager Server vulnerable version: 6.0 homepage: http://www.nortel.com/ccms found:...

Ubuntu Update for mysql-dfsg-5.0 vulnerability USN-440-1

Ubuntu Update for Linux kernel vulnerabilities USN-440-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4401.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerability USN-440-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

IBM Director <= 5.20.3su2 CIM Server Remote DoS Vulnerability

No description provided by source. SEC-CONSULT Security Advisory 20090305-1 ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable version: = 5.20....

IBM Director 5.20.3su2 CIM Server - Remote Denial of Service

IBM Director 5.20.3su2 CIM Server - Remote Denial of Service SEC-CONSULT Security Advisory ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable...