Vulnerability in core server (CVE-2009-3229)

Authenticated non-superusers can shut down the backend server by re-LOAD-ing libraries in $libdir/plugins, if any libraries are present there...

PostgreSQL Multiple Vulnerabilities

Binary data 5170.prm...

Hack the network to achieve the overload attack to the process of parsing-vulnerability warning-the black bar safety net

In network overload attack, a shared resource or service due to the need to process large amounts of request that cannot be met from other users of the arrival of the request. For example, a user generates a lot of processes, then other users cannot run own processes. If a user uses a lot of disk...

Firebird SQL DoS

opconnectrequest request with invalid paramters causes server to shutdown listening socket end enter infinite loop...

openSUSE Security Update : postfix (postfix-194)

When exectuting external programs postfix didn't close the file descriptor of the epoll system call. This could potentially be exploited to shutdown postfix CVE-2008-3889. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

openSUSE Security Update : ConsoleKit (ConsoleKit-132)

ConsoleKit allows anyone to shutdown/restart the machine due to missing PolicyKit support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ConsoleKit-132. The text description of this plugin i...

Linux/x86 - execve(/sbin/shutdown,/sbin/shutdown 0) Shellcode (36 bytes)

Linux/x86 - execve/sbin/shutdown,/sbin/shutdown 0 Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform include const char shellcode= "\x6a\x0b" // push $0xb "\x58" // pop %eax "\x99" // cltd "\x52" // push %edx "\x68\x64\x6f\x77\x6e" // push $0x6e776f64 "\x68\x73\x68\x75\x74" // push...

Code injection

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...

CVE-2008-6816

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...

CVE-2008-6816

CVE-2008-6816 affects Eaton MGEOPS Network Shutdown Module prior to 3.10 Build 13. An attacker can add a custom action in pane_actionbutton.php and then trigger it via exec_action.php, enabling remote arbitrary code execution. The NASL/NVD data also notes authentication bypass in older versions (...

CVE-2008-6816

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...

FBI, US Marshals hit by mystery malware

From the Associated Press Law enforcement computers were struck by a Mystery computer virus Thursday, forcing the FBI and the U.S. Marshals to shut down part of their networks as a precaution. The U.S. Marshals confirmed it disconnected from the Justice Department’s computers as a protective...

CVE-2008-1517

Array index error in the xnu Mach kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service system shutdown via unspecified vectors related to workqueues...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:234)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Buffer overflow in the hfsplusfindcat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service memory corruption or system crash via an hfsplus filesystem image...

MDKA-2007:130 : evolution-data-server

A reference leak prevented evolution-data-server to correctly shutdown when terminating a GNOME session. This prevented some programs to start correctly when login back after a logout. Updated package fixes this issue, and include stability fixes for Evolution mail client GNOME bugs 271777, 48835...

Fedora 10 : proftpd-1.3.1-8.fc10 (2009-0089)

This update fixes a security issue where an attacker could conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands. It also fixes some SSL shutdown issues seen with certain clients. Note that Tenable Network Security has extracted the preceding description block directl...

CVE-2009-0039

Multiple cross-site request forgery CSRF vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that 1 change the web administration password, 2 upload application...

CVE-2009-0039

Multiple cross-site request forgery CSRF vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that 1 change the web administration password, 2 upload application...

APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting

APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting source: https://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...

APC PowerChute Network Shutdown XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-009 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=82 Application: APC PowerChute Network Shutdown's Web Interface Vendor URL: http://www.apc.com/ Bug: XSS/Response...