Adobe Audition vulnerability processing malformed session file

Adobe Audition vulnerability processing malformed session file 1. Advisory Information Title: Adobe Audition vulnerability processing malformed session file Advisory ID: CORE-2011-0204 Advisory URL: Date published: 2011-05-12 Date of last update: 2011-05-12 Vendors contacted: Adobe Release mode:...

[PRE-SA-2011-04] Heap overflow in EFI partition handling code of the Linux kernel

PRE-CERT Security Advisory ========================== Advisory: PRE-SA-2011-04 Released on: 10 May 2011 Last updated on: 10 May 2011 Affected product: Linux Kernel 2.4 and 2.6 Impact: information disclosure, denial-of-service Origin: storage devices Credit: Timo Warns PRESENSE Technologies GmbH C...

Leading Edge Technology Solutions (L.E.T.S) SQL-i Vulnerability

Exploit for php platform in category web applications +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | | | +=+=+= +=+=+= / \ | || | / / | \ | |\ \ / \ / / +=+=+= +=+=+= / /\ | || | // | | | | / | | \ / / / +=+=+= +=+=+= / \ | | | | | | ...

Tom Sawyer Software GET Extension Factory Remote Code Execution

This module exploits a remote code execution vulnerability in the tsgetx71ex553.dll ActiveX control installed with Tom Sawyer GET Extension Factory due to an incorrect initialization under Internet Explorer. While the Tom Sawyer GET Extension Factory is installed with some versions of VMware...

RealFlex RealWin Tag Manipulation Buffer Overflow (CVE-2011-1563)

RealWin is a SCADA Supervisory Control And Data Acquisition server product developed by RealFlex Technologies. SCADA is an industrial control system, in which a computer system monitors and controls an industrial, infrastructure or facility based process. A buffer overflow vulnerability has been...

SE Software Technologies Sensitive Database Disclosure

Exploit for php platform in category web applications +Exploit Title: SE Software Technologies Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + dork : intext:"Powered By : SE Software Technologies" filetype:php + Category : Web Apps SQli...

SE Software Technologies SQL Injection

+Exploit Title: SE Software Technologies Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 26.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Powered By : SE Software Technologies" filetype:php + Category : Web Apps SQli...

AT-TFTP Server Remote Denial of Service Vulnerability

AT-TFTP Server v1.8 Remote Denial of Service Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1013 01/04/2011 Issue Discovered 04/04/2011 Vendor Notified No Response from the Vendor 25/04/2011 Advisory Released Class: Denial of Service Severity: High Overview:...

AT-TFTP Server 1.8 - 'Read' Request Remote Denial of Service

source: https://www.securityfocus.com/bid/47561/info AT-TFTP is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. AT-TFTP 1.8 is affected; other versions may also be...

CA20110420-01: Security Notice for CA SiteMinder

CA20110420-01: Security Notice for CA SiteMinder Issued: April 20, 2011 CA Technologies support is alerting customers to a security risk associated with CA SiteMinder. A vulnerability exists that can allow a malicious user to impersonate another user. CA Technologies has issued patches to address...

CA20110420-02: Security Notice for CA Output Management Web Viewer

CA20110420-02: Security Notice for CA Output Management Web Viewer Issued: April 20, 2011 CA Technologies support is alerting customers to security risks associated with CA Output Management Web Viewer. Two vulnerabilities exist that can allow a remote attacker to execute arbitrary code. CA...

7-Technologies Interactive Graphical SCADA System Remote Code Execution

Added: 04/17/2011 CVE: CVE-2011-1567 BID: 46936 Background 7-Technologies Interactive Graphical SCADA System IGSS is a SCADA solution used mainly in Denmark and the US. Problem 7T IGSS server contains multiple stack overflows, a format string vulnerability, a remote command execution vulnerabilit...

GNOME 3.0 Released , Available for Download !

GNOME 3.0 Released , Available for Download ! GNOME 3.0 is a major milestone in the history of the GNOME Project. The release introduces an exciting new desktop which has been designed for today's users and which is suited to a range of modern computing devices. GNOME's developer technologies hav...

Dream Vision Technologies Web Portal - SQL Injection

Dream Vision Technologies Web Portal - SQL Injection Title : Dream Vision Technologies SQL Injection Vulnerability Author: eXeSoul Home : 1337day.com or www.indishell.in /www.andhrahackers.com Email : [email protected] date : 6/04/2011 d0rk:- Developed and Managed by Dream Vision Technologies Pvt...

Dream Vision Technologies Web Portal - SQL Injection

Title : Dream Vision Technologies SQL Injection Vulnerability Author: eXeSoul Home : 1337day.com or www.indishell.in /www.andhrahackers.com Email : [email protected] date : 6/04/2011 d0rk:- Developed and Managed by Dream Vision Technologies Pvt Ltd category : Web Apps SQli Go To Site :- SQL...

CVE-2011-1568

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2011-1566

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...

PT-2011-3223

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9.00.00.11059 and earlier Description The issue allows remote attackers to execute arbitrary programs via .. dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port...

CVE-2011-1565: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to 1 read opcode 0x3 or 2 create or write opcode 0x2 arbitrary files via ..\ dot dot backslash sequences to TCP port 12401...

CVE-2011-1568: Use of Externally-Controlled Format String

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...