3839 matches found
ownCloud: test1.owncloud.com: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability
DOMAIN: test1.owncloud.com PORT: 443 THREAT: The Web server was detected that supports the HTTP TRACE method. This method allows debugging and connection trace analysis for connections from the client to the Web server. Per the HTTP specification, when this method is used, the Web server echoes...
Microsoft Office 2007 MSO.dll Use-After-Free Exploit
Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=414&can=1 The following crash was observed in MS Office 2007 running under Windows 2003 x86. Microsoft Office File Validation Add-In is disabled and application verified...
ownCloud: s2.owncloud.com: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability
DOMAIN: s2.owncloud.com PORT: 83 THREAT: The Web server was detected that supports the HTTP TRACE method. This method allows debugging and connection trace analysis for connections from the client to the Web server. Per the HTTP specification, when this method is used, the Web server echoes back...
ownCloud: demo.owncloud.org: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability
DOMAIN: demo.owncloud.org PORT: 8080 THREAT: The Web server was detected that supports the HTTP TRACE method. This method allows debugging and connection trace analysis for connections from the client to the Web server. Per the HTTP specification, when this method is used, the Web server echoes...
Microsoft Office 2007 - mso.dll Use-After-Free (MS15-081)
Microsoft Office 2007 - mso.dll Use-After-Free MS15-081 Source: https://code.google.com/p/google-security-research/issues/detail?id=414&can=1 The following crash was observed in MS Office 2007 running under Windows 2003 x86. Microsoft Office File Validation Add-In is disabled and application...
Wireshark 1.12.x < 1.12.7 Multiple DoS (Mac OS X)
The version of Wireshark installed on the remote Mac OS X host is 1.12.x prior to 1.12.7. It is, therefore, affected by multiple denial of service vulnerabilities : - An unspecified flaw exists that is triggered when adding an item to the protocol tree. A remote attacker can exploit this, via a...
Wireshark 1.12.x < 1.12.7 Multiple DoS
The version of Wireshark installed on the remote Windows host is 1.12.x prior to 1.12.7. It is, therefore, affected by multiple denial of service vulnerabilities : - An unspecified flaw exists that is triggered when adding an item to the protocol tree. A remote attacker can exploit this, via a...
Microsoft Internet Explorer stack Property Descriptor Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
KLA10637 Multiple vulnerabilities in Wireshark
Multiple vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities remotely to cause a denial of service via a specially crafted packet trace file. Below is a complete list of vulnerabilities 1. The deemergnumlist function and the debcdnum function in...
php: exception:: getTraceAsString type confusion issue after unserialize
A flaw was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...
Zendesk: Error stack trace enabled
The researcher found an endpoint that generated a stack-trace for a specified URL input...
McAfee SiteAdvisor 3.7.2 - Firefox Use-After-Free (PoC)
McAfee SiteAdvisor 3.7.2 - Firefox Use-After-Free PoC McAfee SiteAdvisor 3.7.2 for firefox Use After Free Poc / Title: McAfee SiteAdvisor 3.7.2 firefox Use After Free Author: Marcin Ressel Twitter: https://twitter.com/mressel NPMcFFPlg32.dll McAfee SiteAdvisor 3.7.2 Tested on: Windows 8.1 x64 and...
php: exception:: getTraceAsString type confusion issue after unserialize
A flaw was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...
php: exception:: getTraceAsString type confusion issue after unserialize
A flaw was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...
PHP 'exception::getTraceAsString' type obfuscation vulnerability
PHP is a general-purpose scripting language. A type-obfuscation vulnerability in PHP exception::getTraceAsString when handling input from deserialization constructs allows remote attackers to exploit the vulnerability to obtain information about an application's leaked memory or execute arbitrary...
EAP: LDAP bind password is being logged with TRACE log level
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...
EAP: LDAP bind password is being logged with TRACE log level
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...
EAP: LDAP bind password is being logged with TRACE log level
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...
EAP: LDAP bind password is being logged with TRACE log level
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...
EAP: LDAP bind password is being logged with TRACE log level
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...