CVE-2012-3553

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

Null pointer dereference

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

PT-2012-4804

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions prior to 10.5.1 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash due to a NULL pointer dereference. This occurs when a Station Key Pad Button messag...

CVE-2012-3553: Undefined Security Weakness

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

QNAP Command Injection Vulnerability

Exploit for hardware platform in category dos / poc QNAP Turbo NAS with firmware versions 3.6.1 Build 0302T and below suffer from a command injection vulnerability that allows for remote code execution. Product. QNAP Platform. Turbo NAS verified and possibly others Affected versions. Firmware...

PageAdmin XSS vulnerability-vulnerability warning-the black bar safety net

A station in the fall, all stations are to perish XSSWe are not very concerned?? http://www.pageadmin.net/e/info/suc.aspx?code=%3Cscript%3Ealert'hacked%20by%20wing'%3C/script%3E Excerpts from:...

Synology Photo Station 5 - Reflected Cross-Site Scripting

Title : Photo Station 5 - Reflected Cross-Site Scripting Author : Simon Ganiere Vendor : http://www.sinology.com Advisory : CVE-2012-1556 Software : Photo Station 5 - DSM 3.2 1955 Date : 05/02/2012 30/01/2012 Issue Discovered 05/02/2012 Vendor Notified 06/03/2012 Vendor released DSM 4 Class:...

Synology Photo Station 5 DSM 3.2 - photo_one.php Script Cross-Site Scripting

Synology Photo Station 5 DSM 3.2 - photoone.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/52416/info Synology Photo Station is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute...

Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/52416/info Synology Photo Station is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

NASA Computers Hacked Repeatedly in Last Two Years

NASA has been hit repeatedly by hackers during the last two years – including an incident where attackers compromised systems at the agency’s Jet Propulsion Laboratory. The situation was revealed in testimony Feb. 29 by NASA Inspector General Paul Martin before the House Science, Space and...

http-qnap-nas-info NSE Script

Attempts to retrieve the model, firmware version, and enabled services from a QNAP Network Attached Storage NAS device. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline,...

Japanese Space Agency Loses Data After Computer Infection

The Japanese Aerospace Exploration Agency JAXA is the latest high profile government agency in that country found to be infected with a computer virus. According to a JAXA press release, information stored on an employee computer terminal as well as system information accessible to the employee...

BIWEB bugs and fixes-vulnerability warning-the black bar safety net

BIWEB PHP open source enterprise built Station system bug fixed version, 1. Pass to kill the contains /wap/detail.php, X, X... $objWebInit = new wap; if empty$GET'page' $intPage = 1 ; else $intPage = intval$GET'page'; if empty$GET'cpage' $intCPage = 1 ; else $intCPage = intval$GET'cpage'; if !...

CheckPoint Firewall-1 SecuRemote Topology Service Hostname Disclosure

This module sends a query to the port 264/TCP on CheckPoint Firewall-1 firewalls to obtain the firewall name and management station such as SmartCenter name via a pre-authentication request. The string returned is the CheckPoint Internal CA CN for SmartCenter and the firewall host. Whilst...

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station Norwegian company FXI Technologies has been showing a USB stick-sized portable computer prototype, featuring with a dual-core 1.2-GHz CPU, 802.11n Wi-Fi, Bluetooth, HDMI-out and a microSD card slot for memory...

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station Norwegian company FXI Technologies has been showing a USB stick-sized portable computer prototype, featuring with a dual-core 1.2-GHz CPU, 802.11n Wi-Fi, Bluetooth, HDMI-out and a microSD card slot for memory...

APPLE-SA-2011-11-10-2 Time Capsule and AirPort Base Station (802.11n) Firmware 7.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-11-10-2 Time Capsule and AirPort Base Station 802.11n Firmware 7.6 Time Capsule and AirPort Base Station 802.11n Firmware 7.6 is now available and addresses the following: Available for: AirPort Extreme Base Station with 802.11n, AirPort...

Apple Time Capsule and AirPort Base Station (802.11n) Firmware < 7.6 (APPLE-SA-2011-11-10-2)

According to the firmware version collected via SNMP, the copy of dhclient-script included with the remote Apple Time Capsule / AirPort Express Base Station / AirPort Extreme Base Station reportedly fails to strip shell meta-characters in a hostname obtained from a DHCP response. A remote attacke...

Industry Star of self-help built Station system v0. 8 7 vulnerability and fix-vulnerability warning-the black bar safety net

//templateedit.php function loadlibrary$currtemplate, $libname $libname = strreplace"0xa", ", $libname; // filter 0xa illegal characters if$libname == 'style' $libfile = '../templates/userthemes/' . $currtemplate . '/'.$ libname.'. css'; else $libfile = '../templates/userthemes/' . $currtemplate...

XYCMS law firm built Station system 1.1 upload vulnerability-vulnerability warning-the black bar safety net

Source code description: XYCMS law firm built Station system contains firm profile, lawyers style, news centre, service areas, typical cases, legal advice, qualification, contact us section. Background function: Enterprise information management: including basic information management, adding,...