6485 matches found
Multiple vendors ZOO file decompression Infinite Loop DoS PoC
Exploit for multiple platform in category dos / poc ============================================================= Multiple vendors ZOO file decompression Infinite Loop DoS PoC ============================================================= / Exploit for the vulnerability: Multiple vendors ZOO file...
Sql injection
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...
CVE-2006-7180
ieee80211output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information related to network structure, and possibly cause a denial of service disrupted authentication and conduct spoofing attacks...
Build not dead asp-Trojan-vulnerability warning-the black bar safety net
Author: black memory This article has been published in the hacker X-Files magazine tenth copyright of the hackers X-Files on all reproduced please specify the copyright Unexpected, a few days ago I discovered that I worked extremely hard to collect the asp Trojan, and actually not a few not to b...
Buffer-overflow in Conquest client 8.2a (svn 691)
Luigi Auriemma Application: Conquest http://www.radscan.com/conquest.html Versions: = 8.2a svn 691 Platforms: nix and Windows Bugs: A buffer-overflow in metaGetServerList B memory corruption through SPCLIENTSTAT Exploitation: local and remote, versus the client Date: 07 Mar 2007 Author: Luigi...
CVE-2007-1094
Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service NULL dereference and application crash via JavaScript onUnload handlers that modify the structure of a document...
security flaw
Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:182)
A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Stephane Eranian discovered an issue with permon2.0 where, under certain circumstances, the perfmonctl system call may not correctly manage the file descriptor reference count, resulting in the system possibly...
Ce-Admin news publishing system vulnerability analysis-vulnerability warning-the black bar safety net
The news publishing system is currently mainly used for a picture news release, due to the generated html, the browsing speed is very fast, resulting in a more modified version, currently found in at least 4 modified version, the user group of the majority, although modified, but still there are...
Design/Logic Flaw
The dohfstruncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service kernel panic via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal...
CVE-2007-0318: Undefined Security Weakness
The dohfstruncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service kernel panic via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal...
Quietly tell you how hackers to your system kind of Trojan horse-vulnerability warning-the black bar safety net
I believe that many friends have heard of the Trojans, always feel it is very mysterious, very difficult, but in fact with the Trojan software intelligent, a lot of hackers are able to easily achieve the attack purpose. Today, the author in the latest of a Trojan horse-the black hole 2 0 0 4, fro...
Vulnerabilities в W-Agora
Здравствуйте 3APA3A! Сообщаю вам о найденных мною 22.11.2006 уязвимостях в W-Agora 4.1.5 = 4.1.5. Это Cross-Site Scripting, SQL DB Structure Extraction та Full path disclosure уязвимости. Уязвимости в скрипте search.php3. XSS:...
FreeBSD : gnupg -- remotely controllable function pointer (4db1669c-8589-11db-ac4f-02e081235dab)
Werner Koch reports : GnuPG uses data structures called filters to process OpenPGP messages. These filters are used in a similar way as a pipelines in the shell. For communication between these filters context structures are used. These are usually allocated on the stack and passed to the filter...
Debian DSA-1231-1 : gnupg - several vulnerabilities
Several remote vulnerabilities have been discovered in the GNU privacy guard, a free PGP replacement, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6169 Werner Koch discovered that a buffer overfl...
gnupg -- remotely controllable function pointer
Werner Koch reports: GnuPG uses data structures called filters to process OpenPGP messages. These filters are used in a similar way as a pipelines in the shell. For communication between these filters context structures are used. These are usually allocated on the stack and passed to the filter...
Large enterprises within the network penetration of the common software has a breaking point-vulnerability warning-the black bar safety net
Some enterprise-level network, especially in Europe and the United States of large companies, the network structure of the General characteristics is the dmz Zone and the internal network is substantially isolated from the domain into the clear, the permissions are set meticulous and strict,...
Microsoft Windows - spoolss GetPrinterData() Remote Denial of Service
Microsoft Windows - spoolss GetPrinterData Remote Denial of Service !/usr/bin/python MS Windows spoolss GetPrinterData 0day Memory Allocation Remote DoS Exploit Bug discovered by h07 Tested on Windows 2000 SP4 Polish + All Microsoft Security Bulletins Example: C:\python spoolssdos.py 192.168.0.2...