openssl security update

CentOS Errata and Security Advisory CESA-2014:1052 Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

NoVirusThanks File Governor - Unlock locked files and folders

NoVirusThanks File Governor is an advanced program which allows for files and folders within the system to be unlocked so that normal file I/O operations can be completed when normally they would not be able to be due to operating system restrictions for files currently in use. Once a file or...

GGZ Gaming Zone 0.0.12 Multiple Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17094/info GGZ Gaming Zone is prone to multiple remote denial-of-service vulnerabilities. These issues are due to improper input sanitization. An attacker may cause the victim's connection to the server to terminate,...

UBUNTU-CVE-2014-1719

Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworkerstub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service heap memory corruption or possibly have...

Windows7 Force Terminate Explorer Shellcode - 255 chars

/------------------------------------------------ == By Ayrbyte ====== Geng Simbe @ TKJ 1 Club ======================================== Greets To : Adit Groundd SAndd Notte, Agos Wahyo, Aguenkk Rebel Black Sweet, Ahmad Bagoes, Alvin Putra Marcdyto, Arieb Shezhaniea, Aviep Autiez, Chusnie Mubarok,...

PT-2013-3822

Name of the Vulnerable Software and Affected Versions Google Chrome Frame plugin versions prior to 26.0.1410.28 Description The issue is related to the Hook Terminate function in the Google Chrome Frame plugin, which does not properly handle attach tab requests. This allows user-assisted remote...

How to Forcibly Stop Stuck Jobs

Notice of Future Change This article may be retired in the future. As the product has matured, the incidence of jobs or tasks becoming "stuck" has decreased significantly. However, there are instances where a job might be executing a background task, giving the appearance that it has become stuck...

VMWare Terminate ESX Login Sessions

This module will log into the Web API of VMWare and try to terminate user login sessions as specified by the session keys. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMWare Terminate ESX...

VLC Media Player 1.1.10 The Luggage (libplaylist_plugin.dll) Terminate POC

Exploit for windows platform in category dos / poc ============================================================================ VLC Media Player 1.1.10 The Luggage libplaylistplugin.dll Terminate POC ============================================================================...

F-secure Browsing Protection (fsgkiapi.dll) Plugin Terminate POC

Exploit for windows platform in category dos / poc ================================================================== F-secure Browsing Protection fsgkiapi.dll Plugin Terminate POC ==================================================================...

Sybase M-Business Anywhere agSoap.exe Buffer Overflow

A heap buffer overflow has been reported in Sybase M-Business Anywhere. M-Business Anywhere is a mobile applications development, deployment and management platform. The vulnerability is due to a boundary error in the server while handling specially crafted SOAP requests. A remote attacker could...

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-090 February 18, 2011 -- CVE ID: CVE-2010-4227 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Netware --...

Oracle MySQL Database IN and CASE NULL Argument Denial of Service

MySQL is a popular open-source implementation of a relational database that supports the Structured Query Language SQL for querying and updating stored data. A denial of service vulnerability has been reported in Oracle MySQL database server. The vulnerability is due to an error while handling IN...

CA ARCserve Backup Tape Engine Denial of Service (CVE-2008-4398)

There exists a denial of service vulnerability in CA BrightStor ARCserve Backup Tape Engine service. The vulnerability is due to insufficient input validation in the ClientCreateJobHandle library function. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted messa...

OpenLDAP BER Decoding Denial of Service (CVE-2008-2952)

OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol LDAP service. There exists a denial of service vulnerability in OpenLDAP slapd. The flaw is due to a design error when decoding ASN.1 BER network messages. A remote unauthenticated attacker can trigger this...

CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability (978037)

This host is missing a critical security update according to Microsoft Bulletin MS10-011. OpenVAS Vulnerability Test $Id: secpodms10-011.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability 978037 Authors: Antu Sanadi Copyright: Copyrig...

HP OpenView Network Node Manager CGI programs HTTP Request Buffer Overflow (CVE-2007-6204; CVE-2008-0067)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A buffer overflow...

Adobe Acrobat JavaScript getIcon Method Buffer Overflow (CVE-2009-0927)

Adobe develops products for creating, distributing, and viewing Portable Document Format PDF documents. Adobe Reader is a viewer application that allows for reading and the printing of PDF documents. Adobe Acrobat provides PDF authoring functionality in addition to those of viewing. A buffer...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...