970 matches found
RedHat Update for glibc RHSA-2017:1916-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TP-Link WR841N code execution( CVE-2017-9466)
CVE-2017-9466: Why Is My Router Blinking Morse Code? We recently discovered two vulnerabilities in TP-Link’s WR841N V8 router that we exploited to obtain custom code execution on the router. After working closely with the vendor to patch the router’s firmware, we are disclosing the details of our...
Document Liberation Project libstaroffice Stack Buffer Overflow Vulnerability
Document Liberation Project is a project that enables users to work with vendor-locked content. libstaroffice is an import filter for StarOffice documents. Document Liberation Project libstaroffice The 'DatabaseName::read' function in the lib/StarWriterStruct.cxx file in versions prior to...
ALPINE-CVE-2017-6891
Two errors in the "asn1findnode" function lib/parseraux.c within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility...
Dmitry Stack Buffer Overflow Vulnerability
DMitry Deepmagic Information Gathering Utility is a UNIX/GNU Linux command line program coded purely in C that gathers as much information about the host as possible. DMitry Deepmagic Information Gathering Tool suffers from a stack buffer overflow vulnerability that can be exploited by an attacke...
RedHat Update for glibc RHSA-2017:0680-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2017:0380-1 Security update for libxml2
This update for libxml2 fixes the following issues: CVE-2016-4658: use-after-free error could lead to crash bsc1005544 Fix NULL dereference in xpointer.c when in recovery mode bsc1014873 CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not detected b...
CentOS 7 : glibc (CESA-2016:2573)
An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Dlink DIR routers HNAP login function multiple vulnerabilities-vulnerability warning-the black bar safety net
The affected products in the background Smartphones, laptops, tablets, phones, Smart TV, gaming console and other devices all at the same time to connect. This is why we designed our new AC3200 Ultra Wi-Fi router. By Tri-Band technology, making speeds of up to 3. 2Gbps, which provides a demanding...
施耐德 Modicon M340 PLC Web登录验证栈溢出漏洞
No description provided by source...
MGASA-2016-0053 Updated socat packages fix security vulnerability
In socat before 2.0.0-b9, in the OpenSSL address implementation, the hard coded 1024 bit DH p parameter was not prime. It may be possible for an eavesdropper to recover the shared secret from a key exchange CVE-2016-2217. In socat before 2.0.0-b9, a stack overflow vulnerability was found that can...
Rockwell Automation RSLinx Classic Vulnerability
RSLinx Classic is used to enable communication between Rockwell Software applications within an industrial control system. A stack buffer overflow vulnerability exists in the implementation of OPCTest.exe in RSLinx Classic versions prior to 3.73.00. This allows an attacker to exploit this...
NJStar Communicator 3.00 MiniSMTP Server Remote Exploit
No description provided by source. Exploit Title: NJStar Communicator 3.00 MiniSMTP Server Remote Exploit Date: 10/31/2011 Author: Dillon Beresford Twitter: https://twitter.com/!/D1N Software Link: http://www.njstar.com/download/njcom.exe Version: 3.00 and prior Build: 11818 and prior Tested on:...
Mac OS X NFS Mount Privilege Escalation
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Mac OS X NFS Mount Privilege Escalation Exploit', 'Description' = %q This exploit leverage a stack overflow vulnerabili...
Apple Mac OS X Lion Kernel xnu Privilege Escalation
/ Apple Mac OS X Lion Kernel Notes: This exploit leverage a stack overflow vulnerability to escalate privileges. The vulnerable function nfsconvertoldnfsargs does not verify the size of a user-provided argument before copying it to the stack. As a result by passing a large size, a local user can...
Apple Mac OSX (Lion) Kernel xnu-1699.32.7 except xnu-1699.24.8 NFS Mount - Local Privilege Escalation
Apple Mac OSX Lion Kernel xnu-1699.32.7 except xnu-1699.24.8 NFS Mount - Local Privilege Escalation / Apple Mac OS X Lion Kernel Notes: This exploit leverage a stack overflow vulnerability to escalate privileges. The vulnerable function nfsconvertoldnfsargs does not verify the size of a...
Stack overflow
Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Word Stack Overflow Vulnerability."...
23-year-old Stack overflow vulnerability discovered in X11 Server
X.Org Foundation develops the X-Window System, the standard window system for open source operating systems and devices. Most of the graphical user interfaces for Unix and Linux systems rely on it. At the 30th Chaos Communication Congress CCC in Germany, Ilja van Sprundel, a security researcher...
D-Link routers authenticate administrative access using specific User-Agent string
Overview Various D-Link routers allow administrative web actions if the HTTP request contains a specific User-Agent string. This backdoor allows an attacker to bypass password authentication and access the router's administrative web interface. Planex and Alpha Networks devices may also be...
