Internet Explorer CHTML Use After Free (MS13-009; CVE-2013-0029)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Ruby Activemodel Gem -- Circumvention of attr_protected

Aaron Patterson reports: The attrprotected method allows developers to specify a blacklist of model attributes which users should not be allowed to assign to. By using a specially crafted request, attackers could circumvent this protection and alter values that were meant to be protected. All use...

Adobe Flash Player SWF File Buffer Overflow (APSB13-04; CVE-2013-0633)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an improper buffer allocation while handling specially crafted SWF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

SuSE 11.1 / 11.2 Security Update : gtk2 (SAT Patch Numbers 6389 / 6390)

The following issue has been fixed : - Specially crafted GIF and XBM files could have crashed gtk2 CVE-2012-2370 / CVE-2011-2485 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.1 Security Update : net-snmp (SAT Patch Number 6517)

This update to net-snmp resolves the following issues : - Specially crafted SNMP GET requests could cause a denial of service application crash via a heap-based out-out-bounds read flaw which could be exploited remotely. CVE-2012-2141 - The snmpd agent should read shared memory information from...

VMware View Multiple Vulnerabilities (VMSA-2012-0004)

The VMware View, formerly VMware Virtual Desktop Infrastructure components Agent or Server, on the remote host is 4.x prior to 4.6.1. It is, therefore, potentially affected by the following vulnerabilities : - A buffer overflow vulnerability exists in the XPDM and WDDM display drivers and a NULL...

Novell File Reporter FSFUI Arbitrary File Retrieval (CVE-2012-4958)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests, resulting in the retrieval of the contents of a file. A remote attacker can exploit this issue by sending a specially crafted request to the affected...

MS System Center Operations Manager XSS Vulnerabilities (2748552)

This host is missing an important security update according to Microsoft Bulletin MS13-003. OpenVAS Vulnerability Test $Id: secpodms13-003.nasl 6520 2017-07-04 14:28:49Z cfischer $ MS System Center Operations Manager XSS Vulnerabilities 2748552 Authors: Rachana Shetty Copyright: Copyright c 2013...

VLC Media Player < 2.0.5 Multiple Vulnerabilities

Binary data 801175.prm...

BlazeDVD 6.1 - '.PLF' File (ASLR + DEP Bypass) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BlazeDVD 6.1 PLF...

BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BlazeDVD 6.1 PLF...

Firefox/Chrome/Chromium Multiple Web Browsers (Memory Exhaustion)

This is a very stupid bug that can fill the memory and processor simply by entering a URL with a specially crafted web server The Evil Server This bug is based on an incorrect parsing of HTTP responses with "Connection: Keep-Alive" in ... basically all web browsers xD Chrome Firefox Chromium Lynx...

CubeCart 3.0.20 Multiple Vulnerabilities

CubeCart versions 3.0.20 and below suffer from a remote shell upload, cross site scripting and remote SQL injection vulnerabilities. 1. OVERVIEW CubeCart 3.0.20 and lower versions are vulnerable to Arbitrary File Upload. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart softwa...

Malformed GIF images could allow execution of arbitrary code

When loading GIF images into memory, Opera should allocate the correct amount of memory to store that image. Specially crafted image files can cause Opera to allocate the wrong amount of memory. Subsequent data may then overwrite unrelated memory with attacker-controlled data. This can lead to a...

squid -- denial of service

Squid developers report: Due to missing input validation Squid cachemgr.cgi tool is vulnerable to a denial of service attack when processing specially crafted requests. This problem allows any client able to reach the cachemgr.cgi to perform a denial of service attack on the service host. The...

Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the affected service. Successful exploitation could result in arbitra...

SuSE Update for update openSUSE-SU-2012:1461-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201214611.nasl 8336 2018-01-09 07:01:48Z teissa $ SuSE Update for update openSUSE-SU-2012:1461-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

SuSE Update for update openSUSE-SU-2012:1421-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201214211.nasl 8352 2018-01-10 07:01:57Z teissa $ SuSE Update for update openSUSE-SU-2012:1421-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Microsoft Windows DirectPlay Remote Code Execution Vulnerability (2770660)

This host is missing an important security update according to Microsoft Bulletin MS12-082. OpenVAS Vulnerability Test $Id: secpodms12-082.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows DirectPlay Remote Code Execution Vulnerability 2770660 Authors: Veerendra G.G Copyright: Copyright c 20...

Novell File Reporter FSFUI File Upload (CVE-2012-4959)

A file upload vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the target. Successful exploitation could result in arbitrary files bein...