4573 matches found
CVE-2009-3708: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...
CVE-2009-3709: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag...
EasyBits Extras Manager Unspecified Vulnerability
Description EasyBits Extras Manager is prone to an unspecified vulnerability. The cause and impact of this issue are currently unknown. This issue affects versions prior to Extras Manager 2.0.0.67 shipped with versions prior to Skype 4.1.0.179 for Windows. Very few technical details are currently...
iNTERNET.cms Cross-Site Scripting vulnerability
---------------------------------------------------------------------- PT-2009-33 Positive Technologies Security Advisory iNTERNET.cms Cross-Site Scripting vulnerability ---------------------------------------------------------------------- --- Affected Software iNTERNET.cms Versions prior to...
UMI.CMS Cross-Site Scripting vulnerability
---------------------------------------------------------------------- PT-2009-12 Positive Technologies Security Advisory UMI.CMS Cross-Site Scripting vulnerability ---------------------------------------------------------------------- --- Affected Software UMI.CMS Versions 2.x prior to 2.7.1 bui...
ELDORADO CMS Multiple Vulnerabilities
---------------------------------------------------------------------- PT-2009-24 Positive Technologies Security Advisory ELDORADO CMS Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software ELDORADO CMS Versions up to 3.8.2 Product...
CORE-2009-0922: Jetty Persistent XSS in Sample Cookies Application
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Jetty Persistent XSS in Sample Cookies Application 1. Advisory Information Title: Jetty Persistent XSS in Sample Cookies Application Advisory Id: CORE-2009-0922...
Command injection
DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service crash via a long ABOR command...
CVE-2009-3545
DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service crash via a long ABOR command...
Core Security Technologies Advisory 2009.0812
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Hyperic HQ Multiple XSS 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Advisory URL:...
Hyperic HQ 3.2 - 4.2-beta1 Multiple XSS
Exploit for jsp platform in category web applications ======================================= Hyperic HQ 3.2 - 4.2-beta1 Multiple XSS ======================================= Hyperic HQ 1 is an open source monitoring software designed to manage web applications and infrastructure. It auto-discover...
Hyperic HQ 3.2 - 4.2-beta1 Multiple XSS
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Hyperic HQ Multiple XSS 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Advisory URL:...
Hyperic HQ 3.2 < 4.2-beta1 - Multiple Cross-Site Scripting Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Hyperic HQ Multiple XSS 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Advisory URL:...
Chris Hoff on Cloud Security, Disruptive Technologies and PCI DSS
Dennis Fisher talks with Chris Hoff of Cisco about the challenges of cloud deployment and security, cloud use cases and the effect that disruptive technologies can have on enterprises, vendors and standards organizations. Download Subscribe to the Digital Underground podcast on Podcast audio...
VB 2009: Stefan Tanase on Web 2.0 Threats and Anti-Social Networking
Digital Underground podcast with Dennis Fisher Dennis Fisher talks with Stefan Tanase, senior security researcher at Kaspersky Lab, live from Virus Bulletin 2009 about the threats on social networking sites and the privacy and security concerns presented by Web 2.0 technologies. Here are the slid...
Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference
Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap...
Dnsmasq < 2.50 Heap Overflow & Null pointer Dereference Vulns
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and...
Dnsmasq < 2.50 Heap Overflow & Null pointer Dereference Vulns
Exploit for unknown platform in category dos / poc ============================================================= Dnsmasq 2.50 Heap Overflow & Null pointer Dereference Vulns ============================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security...
Core Security Technologies Advisory 2009.0820
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server...
RedHat Security Advisory RHSA-2009:1238
The remote host is missing updates announced in advisory RHSA-2009:1238. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core Security Technologies discovered a heap overflow flaw in dnsmasq when the TFTP service is enabled the --enable-tftp command line option, or b...