Unfixed XSS vulnerability at www.site333.com

Security researcher Space-cowboY, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting www.site333.com, which at the time of submission ranked 5884088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...

CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...

CVE-2007-3850

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

CVE-2007-3850

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

CVE-2007-3850

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

Linux Kernel eHCA驱动物理地址空间信息泄露漏洞

Linux是一款开放源代码的操作系统。 Linux包含的eHCA驱动在映射用户空间资源时存在问题，本地攻击者可以利用漏洞获得物理地址等敏感信息。 部分驱动包含的资源映射到用户空间的大小为4K，如果内核配置使用64K的页，那么在映射过程中会超过60K大小的物理地址空间映射到用户空间，导致敏感信息泄露。 RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux v. 5 server Linux kernel 2.6.18 .4 Linux kernel 2.6.18 .3 Linux kernel 2.6.18 ....

CVE-2007-3850: Exposure of Sensitive Information to an Unauthorized Actor

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

openSUSE 10 Security Update : pdns (pdns-2275)

Two security problems that have been found in PowerDNS are fixed by this update : CVE-2006-4251: The PowerDNS Recursor can be made to crash by sending malformed questions to it over TCP potentially executing code. CVE-2006-4252: Zero second CNAME TTLs can make PowerDNS exhaust allocated stack...

CheckPoint Secure Platform Multiple Buffer Overflows

Hi all, we have published a paper about CheckPoint Firewall-1 vulnerabilities. The platform tested is the Secure Platform R60. We have found many buffer overflows. Most of them are located in command line utilities that can be exploited locally. A very few of them maybe can be exploited remotely,...

CVE-2007-4647

newswire/uploadmedia.cgi in 2coolcode Our Space Ourspace 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi...

CVE-2007-4647

newswire/uploadmedia.cgi in 2coolcode Our Space Ourspace 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi...

CVE-2007-4647

CVE-2007-4647 affects 2coolcode Our Space (Ourspace) 2.0.9. The issue is in uploadmedia.cgi, where unrestricted upload functionality allows remote attackers to upload certain files via unspecified vectors. The root cause is not clearly detailed beyond “unrestricted functionality in uploadmedia.cg...

CVE-2007-4647: Undefined Security Weakness

newswire/uploadmedia.cgi in 2coolcode Our Space Ourspace 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi...

Diskeeper 9 Remote Memory Disclosure Exploit

No description provided by source. / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function...

CVE-2007-4444

Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID 1 0x80 or 2 0x88 to UDP port 34297, related to the buffer containing the server version number...

Buffer overflow

Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID 1 0x80 or 2 0x88 to UDP port 34297, related to the buffer containing the server version number...

CVE-2007-4445

Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service daemon crash via 1 an ID 0x30 packet, 2 an ID 0x38 packet, and an invalid 13-bit integer in 3 an ID 0x60 packet and 4 an ID 0x68 packet; and a denial of service UDP port block via 5 an ID 0x20 packet and 6 ...

CVE-2007-4445: Undefined Security Weakness

Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service daemon crash via 1 an ID 0x30 packet, 2 an ID 0x38 packet, and an invalid 13-bit integer in 3 an ID 0x60 packet and 4 an ID 0x68 packet; and a denial of service UDP port block via 5 an ID 0x20 packet and 6 ...

CVE-2007-4445

CVE-2007-4445 affects Image Space rFactor 1.250 and earlier. The vulnerability allows remote attackers to cause a denial of service via crafted UDP/UDP-like packets: (1) ID 0x30, (2) ID 0x38, and an invalid 13-bit integer in (3) ID 0x60 and (4) ID 0x68 packets, leading to a daemon crash; and a se...