1547 matches found
Aardvark Topsites <= 4.2.2 Remote File Inclusion Vulnerability
The remote system contains a PHP application that is prone to remote file inclusions attacks. Description : Aardvark Topsites PHP is installed on the remote host. It is an open source Toplist management system written in PHP. The application does not sanitize user-supplied input to the...
Mercur Mailserver/Messaging <= 5.0 IMAP Overflow Vulnerability
The Mercur IMAP4 Service running on the host is vulnerable to buffer overflows by sending a special crafted SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
FreeSSHD Key Exchange Buffer Overflow
A vulnerable version of FreeSSHd is installed on the remote host. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : gnutls -- 'gnutls_handshake()' Denial of Service (d864a0a7-6f27-11dd-acfe-00104b9e1a4a)
Secunia reports : A vulnerability has been reported in GnuTLS, which can potentially be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to a use-after-free error when an application calls 'gnutlshandshake' for an already valid session and can...
Serv-U 7.x < 7.2.0.1 SFTP Directory Creation Logging DoS
The installed version of Serv-U 7.x is earlier than 7.2.0.1 and thus reportedly contains an SFTP bug in which directory creation and logging SFTP commands could lead to an application crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'...
blazedvd_bof.pl.txt
!/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other enhanced features:e.g. recording DVD,playback image and...
Sun xVM VirtualBox < 1.6.4 Local Privilege Escalation
The remote host contains a version of Sun xVM VirtualBox, an open source virtualization platform, before 1.6.4. Such versions reportedly include a kernel driver, 'VBoxDrv.sys', that allows a local user to open the device '.\VBoxDrv' and issue IOCTLs with a buffering method of 'METHODNEITHER'...
Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow
====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection "Referer" Header Buffer Overflow - ====================================================================== Table of Contents Affected...
Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows
====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection Response Handling Buffer Overflows - ====================================================================== Table of Contents Affected...
Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow
====================================================================== Secunia Research 25/07/2008 - RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ====================================================================== Table of Contents Affected...
Asterisk IAX2 FWDOWNL Request Spoofing Remote DoS
The firmware download protocol implemented in the version of Asterisk running on the remote host does not initiate a handshake. By spoofing an IAX2 FWDOWNL request, an unauthenticated, remote attacker may be able to leverage this issue to flood a third-party host with unwanted firmware packets fr...
IntelliTamper 2.07 (map file) Local Arbitrary Code Execution Exploit (pl)
No description provided by source. !/usr/bin/perl ksOSe - 7/21/2008 http://secunia.com/advisories/20172 A sploit for an ancient vuln. Just because i need to improve my skills on windows explotation. use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size...
IntelliTamper 2.07 (map file) Local Arbitrary Code Execution Exploit (pl)
Exploit for unknown platform in category local exploits ========================================================================= IntelliTamper 2.07 map file Local Arbitrary Code Execution Exploit pl ========================================================================= !/usr/bin/perl ksOSe -...
BlackBerry Multiple Products PDF Distiller Component PDF Processing Arbitrary Code Execution
The version of BlackBerry Enterprise Server / BlackBerry Unite! on the remote host reportedly contains a vulnerability in the PDF distiller component of the BlackBerry Attachment Service. A remote attacker may be able to leverage this issue to execute arbitrary code on the affected host subject t...
IntelliTamper 2.07 - '.map' Local Arbitrary Code Execution (2)
!/usr/bin/perl ksOSe - 7/21/2008 http://secunia.com/advisories/20172 A sploit for an ancient vuln. Just because i need to improve my skills on windows explotation. use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 345 bad char - \x89 my $shellcode =...
Novell GroupWise Messenger HTTP response handling buffer overflow
Added: 07/07/2008 CVE: CVE-2008-2703 BID: 29602 OSVDB: 46041 Background GroupWise Messenger is an instant messaging client for Novell GroupWise. Problem Novell GroupWise is affected by a buffer overflow vulnerability which could allow command execution when the client program processes specially...
Novell GroupWise Messenger HTTP response handling buffer overflow
Added: 07/07/2008 CVE: CVE-2008-2703 BID: 29602 OSVDB: 46041 Background GroupWise Messenger is an instant messaging client for Novell GroupWise. Problem Novell GroupWise is affected by a buffer overflow vulnerability which could allow command execution when the client program processes specially...
Secunia Research: VLC Media Player WAV Processing Integer Overflow
====================================================================== Secunia Research 02/07/2008 - VLC Media Player WAV Processing Integer Overflow - ====================================================================== Table of Contents Affected...
Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. Mac OS X 10.5.4 contains security fixes for multiple components. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid33281;...
CGIWrap Charset Specification Weakness Error Message XSS
The remote host is running CGIWrap, a wrapper for CGI scripts to provide enhanced security. The version of CGIWrap installed on the remote host does not specify a charset when responses are for error pages. An attacker may be able to leverage this issue to inject arbitrary HTML and script code in...