3755 matches found
GLSA-200710-09 : NX 2.1: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200710-09 NX 2.1: User-assisted execution of arbitrary code Chris Evans reported an integer overflow within the FreeType PCF font file parser CVE-2006-1861. NX and NX Node are vulnerable to this due to shipping XFree86 4.3.0, whic...
JVN#70734805 Lhaplus buffer overflow vulnerability
Lhaplus, software for compression and decompression supporting various compressed file formats, contains a buffer overflow vulnerability. If a user opens a specially crafted file, arbitrary code could be executed with the privilege of the user. Impact Arbitrary code could be executed with the...
Airsensor M520 - HTTPd Remote Denial of Service / Buffer Overflow (PoC)
!/usr/bin/perl -w Airsensor M520 HTTPD Remote Preauth Denial Of Service and Buffer Overflow PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTPS request necessary...
Yahoo! Messenger YVerInfo ActiveX Buffer Overflows
The remote host contains the 'YVerInfo' ActiveX control, distributed as part of the Yahoo! services suite typically downloaded with the installer for Yahoo! Messenger. The version of this control installed on the remote host reportedly contains buffer overflows involving its 'fvCom' and 'info'...
Opera < 9.23 Crafted Javascript Arbitrary Code Execution
The version of Opera installed on the remote host reportedly allows for execution of arbitrary code via specially crafted JavaScript if a user can be tricked into visiting a malicious site. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25900; scriptversion"1.17";...
Xfce Terminal: Remote arbitrary code execution
Background Xfce Terminal is a console tool for the Xfce desktop environment. Description Lasse Karkkainen discovered that the function terminalhelperexecute in file terminal-helper.c does not properly escape the URIs before processing. Impact A remote attacker could entice a user to open a...
XSS vulnerability in Cisco MeetingPlace
SecureTest Ltd www.securetest.com Security Advisory XSS vulnerability in Cisco MeetingPlace Date: 18th July 2007 Author: Roger Jefferiss Application: Cisco MeetingPlace Risk: Medium Vendor Status: Replicated and verified by Cisco Systems, patch available. Reference: http://www.cisco.com Overview:...
MadWifi: Multiple vulnerabilities
Background The MadWifi driver provides support for Atheros based IEEE 802.11 Wireless Lan cards. Description Md Sohail Ahmad from AirTight Networks has discovered a divison by zero in the athbeaconconfig function CVE-2007-2830. The vendor has corrected an input validation error in the...
SNMPc <= 7.0.18 Remote Denial of Service Exploit (meta)
No description provided by source. $Id: snmpc.rb 2007-06-03 $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Macrovision FLEXnet DWUpdateService ActiveX (agent.exe) Multiple Method Arbitrary Command Execution
Macrovision FLEXnet Connect, formerly known as InstallShield Update Service, is installed on the remote host. It is a software management solution for internally-developed and third-party applications, and may have been installed as part of the FLEXnet Connect SDK, other InstallShield software, o...
rmeasymail-xss.txt
RM EasyMail Plus - Cross-Site Scripting Vulnerability 2 This cross-site scripting vulnerability can be exploited if a client views an email with a specially crafted title. Vulnerable E-Mail Title: alert1 Vulnerable: RM EasyMail Plus Google d0rk: intitle:"Powered by RM EasyMail Plus" John Martinel...
GLSA-200705-07 : Lighttpd: Two Denials of Service
The remote host is affected by the vulnerability described in GLSA-200705-07 Lighttpd: Two Denials of Service Robert Jakabosky discovered an infinite loop triggered by a connection abort when Lighttpd processes carriage return and line feed sequences. Marcus Rueckert discovered a NULL pointer...
GLSA-200705-10 : LibXfont, TightVNC: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200705-10 LibXfont, TightVNC: Multiple vulnerabilities The libXfont code is prone to several integer overflows, in functions ProcXCMiscGetXIDList, bdfReadCharacters and FontFileInitTable. TightVNC contains a local copy of this cod...
Aircrack-NG 0.7 - 'Specially Crafted 802.11 Packets' Remote Buffer Overflow
/ airodump-exp.c - aircrack/airodump-ng 0.7 remote exploit Proof of concept exploit for a stack and heap based overflow in airodump-ng. The vulnerability can be exploited by transmitting some specially crafted 802.11 packets to execute arbitrary code on any machines within range that are sniffing...
Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit
No description provided by source. / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp evildoc.wpd Original...
Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ==================================================================== Corel Wordperfect X3 13.0.0.565 .PRS Local Buffer Overflow Exploit ==================================================================== / wp13exp.c - Wordperfect X3 remote...
Mozilla Network Security Service: Remote execution of arbitrary code
Background The Mozilla Network Security Service is a library implementing security features like SSL v2/v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME and X.509 certificates. Description iDefense has reported two potential buffer overflow vulnerabilities found by researcher "regenrecht" in the...
GLSA-200703-15 : PostgreSQL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200703-15 PostgreSQL: Multiple vulnerabilities PostgreSQL does not correctly check the data types of the SQL function arguments under unspecified circumstances nor the format of the provided tables in the query planner. Impact : A...
Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
Exploit for unknown platform in category local exploits ============================================================= Microsoft Word 2000 Unspecified Code Execution Exploit 0day ============================================================= use at your own risk + Title: Microsoft Word 2000...
eiq-dos.txt
Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...