Lucene search
+L

3834 matches found

Positive Technologies
Positive Technologies
added 2011/08/31 12:0 a.m.6 views

PT-2011-1068 · Suse +2 · Ext4Dev-Kmp-Trace +3

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6 ext4dev-kmp-trace affected versions not specified Description: The issue concerns a stack-based buffer overflow in the Linux kernel, specifically in the hfs mac2asc function, which can be triggered by a crafted HFS...

7.8CVSS7.3AI score0.02184EPSS
SaveExploits9References45
The Hacker News
The Hacker News
added 2011/07/24 12:6 p.m.5 views

Ani Shell v1.3 Released -- Mail Bomber (with less spam detection) & PHP Decoder

Ani Shell v1.3 Released -- Mail Bomber with less spam detection & PHP Decoder Introduction Ani-Shell is a simple PHP shell with some unique features like Mass Mailer , A simple Web-Server Fuzzer , DDoser, Back Connect , Bind Shell etc etc ! This shell has immense capabilities and have been writte...

7.7AI score
SaveExploits0
Cvelist
Cvelist
added 2011/07/19 8:0 p.m.29 views

CVE-2011-1356

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

5.4AI score0.00358EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2011/06/16 7:13 p.m.7 views

OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

10CVSS5.9AI score0.049EPSS
SaveExploits0References4
seebug.org
seebug.org
added 2011/06/16 12:0 a.m.106 views

Microsoft ATL/MFC跟踪工具'dwmapi.dll' DLL装载任意代码执行漏洞

Bugtraq ID: 42811 CVE ID:CVE-2010-3190 Microsoft Visual Studio是微软公司的开发工具套件系列产品,是一个基本完整的开发工具集,包括了软件整个生命周期中所需要的大部分工具。 Microsoft Visual Studio中使用的ATL MFC Trace Tool AtlTraceTool8.exe工具不安全装载'dwmapi.dll'库,攻击者可以诱使用户在远程WebDAV或SMB共享上打开 TRC,cu,rs,rc或res文件,可以以用户安全上下文装载任意库。 Microsoft Visual Studio 2010 0...

9.3CVSS7.3AI score0.09111EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2011/06/01 12:0 a.m.16 views

Nmap NSE net: http-trace

Sends an HTTP TRACE request and shows header fields that were modified in the response. OpenVAS Vulnerability Test $Id: gbnmaphttptracenet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Kris Katterjohn NASL-Wrapper: autogenerated Copyright: NSE-Script: The...

0.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2011/06/01 12:0 a.m.14 views

Nmap NSE net: http-trace

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0
Oracle linux
Oracle linux
added 2011/05/29 12:0 a.m.26 views

libguestfs security, bug fix, and enhancement update

1.7.17-17 - Remove dependency on gfs2-utils. resolves: rhbz695138 1.7.17-16 - Canonicalize /dev/vd paths in virt-inspector code. resolves: rhbz691724 1.7.17-15 - Fix trace segfault for non-daemon functions. resolves: rhbz676788 1.7.17-14 - Add explicit BuildRequires for latest augeas. RHBZ677616...

4.7CVSS6.2AI score0.00382EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2011/05/26 12:0 a.m.22 views

Oracle Java GlassFish Server Security Bypass Vulnerability (May 2011)

Oracle GlassFish Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.1AI score0.14646EPSS
SaveExploits7References2
The Hacker News
The Hacker News
added 2011/05/18 11:54 a.m.10 views

Wi-Fi Security Challenge 3 By Security Tube, Prize: $50 !

Wi-Fi Security Challenge 3 By Security Tube, Prize: $50 ! Wi-Fi Security Challenge 3: This challenge has 2 parts: 3a. Never Judge a Packet by its Type: In this challenge the trace file contains a Shared Key Challenge Text and Encrypted Response. You will need to crack the WEP key with just this...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/05/15 5:3 a.m.9 views

Wi-Fi Challenge by Security Tube !

Wi-Fi Challenge by Security Tube ! 1. Objective: This series of challenges is aimed at testing your skills as a Wireless Hacker! We will posting challenges ranging from - Basic, Intermediate, Advanced, Expert and Insane levels! Our first challenge remain uncracked which we categorized as "Basic" ...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/05/05 12:0 a.m.44 views

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)

Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...

10CVSS7.8AI score0.87264EPSS
SaveExploits17References20
Tenable Nessus
Tenable Nessus
added 2011/05/05 12:0 a.m.37 views

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)

Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...

10CVSS7.8AI score0.87264EPSS
SaveExploits17References20
Positive Technologies
Positive Technologies
added 2011/04/08 12:0 a.m.6 views

PT-2011-1062 · Suse +2 · Ext4Dev-Kmp-Trace +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the Generic Receive Offload GRO implementation in the Linux kernel. A problem in the napi reuse skb function in net/core/dev.c does not reset the values of certain...

7.8CVSS5.9AI score0.02523EPSS
SaveExploits5References32
ATTACKERKB
ATTACKERKB
added 2011/03/30 10:55 p.m.5 views

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

6.9CVSS5.8AI score0.00543EPSS
SaveExploits1References15
Metasploit
Metasploit
added 2011/03/23 3:21 a.m.60 views

HP NNM CGI webappmon.exe OvJavaLocale Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53. By sending a request containing a cookie longer than 5120 bytes, an attacker can overflow a stack buffer and execute arbitrary code. The vulnerable code is within the OvWwwDebug function. The static-sized stack...

9.3CVSS8AI score0.42261EPSS
SaveExploits10
OpenVAS
OpenVAS
added 2011/03/23 12:0 a.m.22 views

eDirectory DHost Web Server Detection

The eDirectory DHost web server is running at this port. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2011/03/21 5:5 p.m.21 views

Wireshark: heap-based buffer overflow when reading malformed Nokia DCT3 phone signalling traces

Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file...

6.8CVSS6.1AI score0.0348EPSS
SaveExploits0References4
NVD
NVD
added 2011/03/08 9:59 p.m.18 views

CVE-2011-1309

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

7.5CVSS6.3AI score0.01187EPSS
SaveExploits0References4
Prion
Prion
added 2011/03/08 9:59 p.m.22 views

Design/Logic Flaw

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

7.5CVSS6.9AI score0.01187EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder