Fedora Update for python-lxml FEDORA-2014-5773

Check for the Version of python-lxml OpenVAS Vulnerability Test Fedora Update for python-lxml FEDORA-2014-5773 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

MGASA-2014-0202 Updated rxvt-unicode packages fix CVE-2014-3121

Updated rxvt-unicode package fixes security vulnerability: rxvt-unicode aka urxvt before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary comma...

Updated rxvt-unicode packages fix CVE-2014-3121

Updated rxvt-unicode package fixes security vulnerability: rxvt-unicode aka urxvt before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary comma...

CVE-2013-7236

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

Code injection

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

CVE-2013-7236

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

PT-2014-3298

Name of the Vulnerable Software and Affected Versions Simple Machines Forum SMF versions 2.0.6 and earlier, 1.1.19 and earlier Description The issue allows remote attackers to impersonate arbitrary users by utilizing a Unicode homoglyph character in a username. This can lead to unauthorized acces...

CVE-2013-7236: Improper Input Validation

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

InfraRecorder 0.53 Unicode Buffer Overflow

!/usr/bin/python Exploit Title: InfraRecorder Unicode Buffer Overflow Version: version 0.53 Download: http://sourceforge.net/projects/infrarecorder/files/InfraRecorder/0.53/ir053.exe/download Tested on: Windows XP sp2 Exploit Author: Osanda Malith ''' We can overwrite the nseh and seh handlers. I...

Jzip SEH Unicode Buffer Overflow DoS

Jzip version 2.0.0.132900 structured exception handler SEH unicode buffer overflow denial of service exploit. !/usr/bin/python Exploit title: seh unicode buffer overflow DOS Date: 16/04/2014 Exploit Author: motaz reda motazkhodairatgmail.com Software Link : http://www.jzip.com/ Version: jZip...

Jzip 2.0.0.132900 Buffer Overflow

!/usr/bin/python Exploit title: seh unicode buffer overflow DOS Date: 16/04/2014 Exploit Author: motaz reda motazkhodairatgmail.com Software Link : http://www.jzip.com/ Version: jZip v2.0.0.132900 Tested On: Windows 7 ultimate import sys, os filename = "vuln.zip" buffer =...

UBUNTU-CVE-2014-1723

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...

Design/Logic Flaw

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...

CVE-2014-1723

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...

CVE-2014-1723

CVE-2014-1723 corresponds to a vulnerability in Google Chrome prior to version 34.0.1847.116 where the UnescapeURLWithOffsetsImpl function in net/base/escape.cc failed to correctly handle bidirectional IRIs, enabling remote attackers to spoof URLs via crafted RTL Unicode text. Public fixes are re...

CVE-2014-1723

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...

CVE-2014-1723: Improper Input Validation

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...

PT-2014-1093

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116 Description The issue is related to the improper handling of bidirectional Internationalized Resource Identifiers IRIs in the UnescapeURLWithOffsetsImpl function. This makes it easier for remote...

Microsoft Internet Explorer Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2014-1114

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Description The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This is due to insufficient...