iSCSI target Multiple Implementations Format String Code Execution (CVE-2010-0743)

iSCSI Internet Small Computer System Interface is an Internet Protocol based storage networking standard for linking data storage facilities. It is used to transfer data over the network using the SCSI protocol. A format string vulnerability has been reported in multiple implementations of iSCSI...

bzip2 -- integer overflow vulnerability

Secunia reports: A vulnerability has been reported in bzip2, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. The vulnerability is caused due to an integer overflow in the "BZ2decompress" function in decompress.c and can be...

A-PDF All To MP3 Coverter 1.1.0 Universal Exploit

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next -- Add -- blah.wav -- calc will po...

SuSE9 Security Update : freetype2 (YOU Patch Number 12630)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - stack-based buffer overflow while processing CFF opcodes. CVE-2010-1797 - integer underflow. CVE-2010-2497 - invalid free. CVE-2010-2498 - buffer...

openSUSE Security Update : freetype2 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

openSUSE Security Update : freetype2 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

Servlet Exec 5.0p06 File Retrieval

Minded Security Labs: Advisory MSA260209 Servlet Exec Multiple Security Issues Tested Versions: Servlet Exec 5.0p06 on Microsoft IIS 6.0 Minded Security ReferenceID: MSA260209 Credits: Discovery by Stefano Di Paola and Giorgio Fedon of Minded Security Stefano Di Paola stefano.dipaola at...

Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wkssr.dll String Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView Compound File Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wkssr.dll Integer Underflow Vulnerability - ====================================================================== Table of Contents Affected...

Multi-Vendor Autonomy KeyView Filter Multiple Security Issues

SUMMARY Symantec products that ship with the Verity KeyView Filter have updated the module to address multiple security issues being reported in the content filter processing of specifically crafted document formats. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec...

Malicious File Upload

The application server accepted a vbscript file, an HTML file containing JavaScript, and the EICAR test virus as allowed attachments. This means that an attacker could submit a malicious file to the backend, where the file might be launched by another internal RIM employee if they click and open...

File Sharing Wizard Version 1.5.0 (SEH) Exploit

No description provided by source. !/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print " Greetz to:...

File Sharing Wizard 1.5.0 Remote Command Execution

!/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print " Greetz to: The Hackers Garage Family " print ...

File Sharing Wizard 1.5.0 - Remote Overflow (SEH)

File Sharing Wizard 1.5.0 - Remote Overflow SEH !/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print...

File Sharing Wizard 1.5.0 - Remote Overflow (SEH)

!/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print " Greetz to: The Hackers Garage Family " print ...

Secunia Research: Creative Software AutoUpdate Engine 2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 11/06/2010 - Creative Software - - AutoUpdate Engine 2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

GR Board 1.8.6 - 'page.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/40437/info GR Board is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

OpenMairie openAnnuaire Multiple Remote File Include Vulnerabilities

This host is running OpenMairie openAnnuaire and is prone to multiple remote file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenmairieopenannuairemultfileinclvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ OpenMairie openAnnuaire Multiple File Include Vulnerabilities Authors:...

Drupal Panels Module 6.x PHP Code Execution Vulnerability

A vulnerability has been reported in Panels module for Drupal, which can be exploited by malicious users to compromise a vulnerable system. Certain unspecified input is not properly sanitised before being used in the import functionality. This can be exploited to execute arbitrary PHP code...