UBUNTU-CVE-2012-6541

The ccid3hctxgetsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

Oracle Outside In CorelDRAW File Parser Heap Buffer Overflow (CVE-2013-0418)

A heap buffer overflow vulnerability exists in Oracle Outside In. The vulnerability is due to an error when processing Coords structure for loda chunks of type 3 Line/Curve. Remote attackers could exploit the vulnerability to inject and execute arbitrary code in the context of the vulnerable...

CVE-2012-6093: Undefined Security Weakness

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fai...

nss-pam-ldapd fd_set overflow

FDSET structure overflow...

Photodex ProShow Producer 5.0.3297 - '.pxs' Memory Corruption

!/usr/bin/python Exploit Title: Photodex ProShow Producer v5.0.3297 .pxs Memory Corruption Vulnerability Version: = 5.0.3297 Date: 2013-02-14 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://www.photodex.com Tested on: Windows XP SP3 Professional German...

Fedora Update for Zim FEDORA-2013-1485

Check for the Version of Zim OpenVAS Vulnerability Test Fedora Update for Zim FEDORA-2013-1485 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for Zim FEDORA-2013-1460

Check for the Version of Zim OpenVAS Vulnerability Test Fedora Update for Zim FEDORA-2013-1460 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

[SECURITY] Fedora 17 Update: Zim-0.59-1.fc17

Zim is a WYSIWYG text editor written in PyGTK which aims to bring the concept of a wiki to your desktop. Every page is saved as a text file with wiki markup. Pages can contain links to other pages, and are saved automatically. Creating a new page is as easy as linking to a non-existing page. Page...

CVE-2013-0830

The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors...

Design/Logic Flaw

The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors...

CVE-2013-0830

The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors...

CVE-2013-0830

Removed by vendor...

CVE-2013-0828

Removed by vendor...

Ruby on Rails不安全查询生成漏洞

BUGTRAQ ID: 57192 CVECAN ID: CVE-2013-0155 Ruby on Rails简称RoR或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 Ruby on Rails结合JSON参数解析使用Active Record解释参数时，攻击者可以发送带有"IS NULL"的意外数据库查询或清空where语句。 0 Ruby on Rails Ruby on Rails 3.x Ruby on Rails Ruby on Rails 2.3.x 厂商补丁： Ruby on Rails -------------...

The establishment of the station star the latest 0DAY and fix-vulnerability warning-the black bar safety net

//the codepublic function saveprofile $userinfo =@ ParamHolder::get'user', array;//get array if sizeof$userinfo = 0 $this-assign'json', Toolkit::jsonERR'Missing user information!'; return 'result'; $passwdchanged = false; try $ouser = new UserSessionHolder::get'user/id'; if $userinfo'email' !=...

DEBIAN-CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to 1 cause a denial of service crash and delayed delivery of inbound mail via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or 2 obtain sensitive informati...

UBUNTU-CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to 1 cause a denial of service crash and delayed delivery of inbound mail via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or 2 obtain sensitive informati...

CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to 1 cause a denial of service crash and delayed delivery of inbound mail via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or 2 obtain sensitive informati...

hiweb cms background more permissions bypass-vulnerability warning-the black bar safety net

HIWEB is an entire Station management system, many schools in use this to take the station. But this cms background the presence of many of the permissions to bypass the problem. 1. http://xxxx/hiwebcms/system/USER/ You can directly see all the background user information 2...

[Diviner] OWASP Zed Attack Proxy Extension

Diviner is a unique platform that attempts to predict the structure of the server-side memory, source code and processes,by executing scenarios aimed to fingerprint behaviors that derive from specific lines of code, processes or memory allocations,by employing the use of a variety of coverage...