Microsoft Windows Invalid Pointer Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected...

Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow

====================================================================== Secunia Research 25/02/2009 - SHOUTcast DNAS Relay Server Buffer Overflow - ====================================================================== Table of Contents Affected...

Sql injection

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

GLSA-200901-15 : Net-SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200901-15 Net-SNMP: Denial of Service Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact : A remote attacker could send a special...

Net-SNMP: Denial of service

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. Description Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact A remote attacker could send a specially crafte...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology TXT allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable...

CVE-2009-0066

Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology TXT allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable...

CVE-2009-0066

Technical details for CVE-2009-0066 are not publicly available in the provided documents; no concrete information on affected products, components, root cause, impact, or remediation is present. Monitor for updates.

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Get 500 when trying to communicate to confluence via trusted apps.

Steps to reproduce. 1 Install confluence 2.9.2 and crucible 1.6.5 2 Setup trusted apps to crucible specify a "IP address Matches as 10.0.100.123 3 Install the confluence crucible plugin...

Get 500 when trying to communicate to confluence via trusted apps.

Steps to reproduce. 1 Install confluence 2.9.2 and crucible 1.6.5 2 Setup trusted apps to crucible specify a "IP address Matches as 10.0.100.123 3 Install the confluence crucible plugin...

Get 500 when trying to communicate to confluence via trusted apps.

Steps to reproduce. 1 Install confluence 2.9.2 and crucible 1.6.5 2 Setup trusted apps to crucible specify a "IP address Matches as 10.0.100.123 3 Install the confluence crucible plugin...

alexnews-upload.txt

Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex News-Engine 1.5.1 - Arbitrary File Upload

Alex News-Engine 1.5.1 - Arbitrary File Upload Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 (fckeditor) Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Alex Article-Engine 1.3.0 fckeditor Arbitrary File Upload Vulnerability ========================================================================= Yellow Flood...

Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability

No description provided by source. Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 - 'FCKeditor' Arbitrary File Upload

Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload

Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover...