PT-2009-01: PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

Positive Technologies Research Team has discovered several vulnerabilities in PGP Desktop. 1. The IOCTL handler in pgpdisk.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Severity Rating : Severity: Medium Impact: Denial of...

PT-2009-44: Multiple vulnerabilities in Kayako Support Suite

Kayako Support Suite is a HelpDesk system. Vulnerability Description Positive Technologies Research Team discovered Local File Inclusion LFI vulnerabilities in Kayako Support Suite. A vulnerable function unset allows attackers to overwrite an arbitrary global and not overridden variable, which ca...

PT-2009-40: JIRA sensitive information disclosure

JIRA lets you prioritise, assign, track, report and audit your 'issues,' whatever they may be — from software bugs and help-desk tickets to project tasks and change requests. Vulnerability Description Positive Technologies Research Team has discovered a sensitive information disclosure...

Core Security Technologies Advisory 2008.1210

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL:...

[SECURITY] Fedora 8 Update: galeon-2.0.4-7.fc8.3

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 9 Update: galeon-2.0.7-4.fc9

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 10 Update: galeon-2.0.7-4.fc10

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

Multiple XSS Vulnerabilities in World Recipe 2.11

Armorize Technologies Security Advisory Armorize-ADV-2008-0001 Title: Multiple XSS Vulnerabilities in World Recipe 2.11 Date: 2008/12/15 Status: Full Class: Input Validation Error Bugtraq ID: N/A Category: Cross Site Scripting Language: ASP.NET C Description Armorize-ADV-2008-0001 discloses...

CORE-2008-1127 - Vinagre show_error() format string vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string vulnerability Advisory ID: CORE-2008-1127 Advisory URL:...

Vinagre < 2.24.2 show_error() Remote Format String PoC

Exploit for unknown platform in category dos / poc ====================================================== Vinagre 2.24.2 showerror Remote Format String PoC ====================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs...

Vinagre 2.24.2 - show_error() Remote Format String (PoC)

Vinagre 2.24.2 - showerror Remote Format String PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string...

Ocean12 Membership Manager Pro Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Membership Manager Pro Vendor : http://ocean12tech.com/products/membership Dork: ©2005 Ocean12 Technologies. All rights reserved Author : PouyaServer , [email protected]...

Ocean12 Membership Manager Pro Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ Ocean12 Membership Manager Pro Database Disclosure Vulnerability ================================================================...

Ocean12 Membership Manager Pro - Database Disclosure

Ocean12 Membership Manager Pro - Database Disclosure --------------------------------------------------------- Portal Name: Ocean12 Membership Manager Pro Vendor : http://ocean12tech.com/products/membership Dork: ©2005 Ocean12 Technologies. All rights reserved Author : PouyaServer ,...

Ocean12 Membership Manager Pro - Database Disclosure

--------------------------------------------------------- Portal Name: Ocean12 Membership Manager Pro Vendor : http://ocean12tech.com/products/membership Dork: ©2005 Ocean12 Technologies. All rights reserved Author : PouyaServer , [email protected] Vulnerability : Database Disclosure...

Adobe Reader util.printf() JavaScript Function Stack Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================================== Adobe Reader util.printf JavaScript Function Stack Overflow Exploit ===================================================================== Adobe Reader 'util.printf'...

CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Adobe Reader Javascript Printf Buffer Overflow 1. Advisory Information Title: Adobe Reader Javascript Printf Buffer Overflow Advisory ID: CORE-2008-0526 Advisory URL:...

CVE-2008-4924

Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control BARCODELib.MW6Barcode, Barcode.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4923

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control AZTECLib.MW6Aztec, Aztec.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4926

Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control MW6PDF417Lib.PDF417, MW6PDF417.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...