2637 matches found
WordPress Privileges Unchecked in admin.php and Multiple Information Disclosures
Advisory ID Internal CORE-2009-0515 1. Advisory Information Title: WordPress Privileges Unchecked in admin.php and Multiple Information Disclosures Advisory ID: CORE-2009-0515 Advisory URL:http://www.coresecurity.com/content/WordPress-Privileges-Unchecked Date published: 2009-07-08 Date of last...
apt multiple security vulnerabilities
Update problem bacause of unchecked 'date' result. Revoked repository key is incorrectly verified...
Studio Lounge Address Book 2.5 - profile Arbitrary File Upload
Studio Lounge Address Book 2.5 - profile Arbitrary File Upload Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...
CVE-2008-5233
xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including 1 the mymngprocessheader function in demuxmng.c, 2 the openmodfile function in demuxmod.c, and 3 framebuffer allocation in the realparseaudiospecificdata function in demuxreal.c, whi...
security flaw
The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing 1 DefineConstantPool, 2 ActionJump, 3 ActionPush, 4 ActionTry, and unspecified other actions, which allows...
Acoustica Mixcraft <= 4.2 Build 98 (mx4 file) Local BOF Exploit
Exploit for unknown platform in category local exploits =============================================================== Acoustica Mixcraft = 4.2 Build 98 mx4 file Local BOF Exploit =============================================================== !/usr/bin/perl Acoustica Mixcraft mx4 file Local...
Acoustica Mixcraft 4.2 Build 98 - 'mx4' Local Buffer Overflow
!/usr/bin/perl Acoustica Mixcraft mx4 file Local Buffer Overflow Exploit Author: Koshi Date: 08-28-08 0day Application: Acoustica Mixcraft Versions: Possibly Older / 4.1 Build 96 / 4.2 Build 98 Site: http://acoustica.com/mixcraft/download.htm Tested On: Windows XP SP3 Fully Patched A vulnerabilit...
cmsWorks 2.2 RC4 (fckeditor) Remote Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications ================================================================= cmsWorks 2.2 RC4 fckeditor Remote Arbitrary File Upload Exploit =================================================================...
GSC privilege escalation
Privileges are only checked on client side...
.NET JIT Compiler Vulnerability
The remote host is affected by the vulnerabilitys described in CVE-2007-0043 Checking if System.web.dll version is less than 2.0.50727.832 OpenVAS Vulnerability Test $Id: winCVE-2007-0043.nasl 5661 2017-03-21 11:39:13Z cfi $ Description: .NET JIT Compiler Vulnerability Authors: Carsten Koch-Mauth...
Unfixed XSS vulnerability at www.lhump.nl
Security researcher GTADarkDude, has submitted on 05/10/2008 a cross-site-scripting XSS vulnerability affecting www.lhump.nl, which at the time of submission ranked 13873630 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2008. It is...
adobealbum-overflow.txt
Exploitable issue in various Adobe products c0ntex [email protected] Scott Laurie February 2008 Vulnerable applications, tested: Adobe Photoshop Album Starter Adobe After Effects CS3 Adobe Photoshop CS3 Not Vulnerable applications, tested: Adobe Reader Adobe Flash Player This bug is related to th...
Re: [securityreason] *BSD libc (strfmon) Multiple vulnerabilities
On Mar 27, 2:09pm, [email protected] [email protected] wrote: -- Subject: securityreason BSD libc strfmon Multiple vulnerabilities ... stuff deleted ... | Problem exist also in printf function. | | Example code will show Integer Overflow . | | - ---example-start-- | include stdio.h | ...
FreeBSD : qemu -- unchecked block read/write vulnerability (9cfbca7f-efb7-11dc-be01-0211060005df)
Ian Jackson reports on the debian-security mailinglist : When a block device read or write request is made by the guest, nothing checks that the request is within the range supported by the backend, but the code in the backend typically assumes that the request is sensible. Depending on the...
CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference
=== ABSTRACT ========================================================= A new vmsplice system call was introduced in the 2.6.17 release of the Linux kernel. In the 2.6.23 kernel the system call functionality has been further extended resulting in two new critical vulnerabilities. === AFFECTED...
CVE-2008-0008
The padroproot function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from 1 setresuid, 2 setreuid, 3 setuid, and 4 seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as...
pulseuadio privilege escalation
setuid result is not checked...
Debian Security Advisory DSA 1023-1 (kaffeine)
The remote host is missing an update to kaffeine announced via advisory DSA 1023-1. Marcus Meissner discovered that kaffeine, a versatile media player for KDE 3, contains an unchecked buffer that can be overwritten remotely when fetching remote RAM playlists which can cause the execution of...
Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
No description provided by source. /------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll...