VNC Multiple Integer Overflows

1. Advisory Information Title: VNC Multiple Integer Overflows Advisory ID: CORE-2008-1009 Advisory URL:http://www.coresecurity.com/core-labs/advisories/vnc-integer-overflows Date published: 2009-02-03 Date of last update: 2009-02-03 Vendors contacted: UltraVNC, TightVNC Release mode: Coordinated...

Amaya Web Editor XML and HTML parser Vulnerabilities

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser...

MW6 Technologies Barcode ActiveX Buffer Overflow Vulnerability

This host is installed with MW6 Technologies Barcode ActiveX and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodmw6barcodebofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ MW6 Technologies Barcode ActiveX Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright:...

CORE-2008-1211: Amaya web editor XML and HTML parser vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser vulnerabilities Advisory ID: CORE-2008-1211...

Update Protection against MW6 Technologies Barcode.dll ActiveX Control Buffer Overflow

A buffer overflow vulnerability was reported in Barocade, a software provided by MW6 Technologies. The vulnerability is due to a boundary error while processing user input. A remote attacker can exploit this vulnerability by convincing the user to open a crafted html file. Successful exploitation...

CESA-2009-001 - rev 1 Linux syscall interception technologies partial bypass

CESA-2009-001 - rev 1 See all my vulnerabilities at http://scary.beasts.org/security Blog if you want to subscribe to new findings is at http://scarybeastsecurity.blogspot.com/ Linux syscall interception technologies partial bypass Programs affected: Probably many; for example systrace with ptrac...

Amaya Web Editor 11.0 - XML HTML Parser

Amaya Web Editor 11.0 - XML HTML Parser -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser...

Amaya Web Editor 11.0 - XML / HTML Parser

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser vulnerabilities Advisory ID: CORE-2008-1211...

Heap overflow

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control Barcode.MW6Barcode.1, Barcode.dll 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property...

CVE-2009-0298

CVE-2009-0298 describes a heap-based buffer overflow in the MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) version 3.0.0.1. The overflow is triggered by a long Supplement property and allows remote attackers to execute arbitrary code. Multiple sources confirm the vul...

CORE-2008-1128: Openfire multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Openfire multiple vulnerabilities 1. Advisory Information Title: Openfire multiple vulnerabilities Advisory ID: CORE-2008-1128 Advisory URL:...

Openfire multiple vulnerabilities

Openfire multiple vulnerabilities 1. Advisory Information Title: Openfire multiple vulnerabilities Advisory ID: CORE-2008-1128 Advisory URL: Date published: 2009-01-08 Date of last update: 2009-01-07 Vendors contacted: Jive Software Release mode: Coordinated release 2. Vulnerability Information...

openfire -- multiple vulnerabilities

Core Security Technologies reports: Multiple cross-site scripting vulnerabilities have been found which may lead to arbitrary remote code execution on the server running the application due to unauthorized upload of Java plugin code...

PT-2009-05: CA Internet Security Suite Denial of Service Vulnerability

Positive Technologies Research Team has discovered a denial of service DoS vulnerability in CA Internet Security Suite. The IOCTL handler in vetmonnt.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Solution Install latest...

PT-2009-44: Multiple vulnerabilities in Kayako Support Suite

Kayako Support Suite is a HelpDesk system. Vulnerability Description Positive Technologies Research Team discovered Local File Inclusion LFI vulnerabilities in Kayako Support Suite. A vulnerable function unset allows attackers to overwrite an arbitrary global and not overridden variable, which ca...

PT-2009-24: ELDORADO CMS Multiple Vulnerabilities

ELDORADO CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

PT-2009-40: JIRA sensitive information disclosure

JIRA lets you prioritise, assign, track, report and audit your 'issues,' whatever they may be — from software bugs and help-desk tickets to project tasks and change requests. Vulnerability Description Positive Technologies Research Team has discovered a sensitive information disclosure...

PT-2009-41: Multiple vulnerabilities in Kayako Support Suite

Vulnerability Description Positive Technologies Research Team discovered several Installation Path Disclosure vulnerabilities in Kayako Support Suite. The application uses a vulnerable PHP function unserialize, which allows an attacker to disclose the product installation path. In addition, there...

PT-2009-11: SlySoft Multiple Products ElbyCDIO.sys Denial of Service

Vulnerability Description Positive Technologies Research Team has discovered multiple memory corruption vulnerabilities in SlySoft products. The IOCTL handler in ElbyCDIO.sys 6.0.2.0 and earlier, shipped with AnyDVD, Virtual CloneDrive, CloneDVD and CloneCD, uses the METHODNEITHER communication...

PT-2009-01: PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

Positive Technologies Research Team has discovered several vulnerabilities in PGP Desktop. 1. The IOCTL handler in pgpdisk.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Severity Rating : Severity: Medium Impact: Denial of...