Debian DSA-2999-1 : drupal7 - security update

A denial of service vulnerability was discovered in Drupal, a fully-featured content management framework. A remote attacker could exploit this flaw to cause CPU and memory exhaustion and the site's database to reach the maximum number of open connections, leading to the site becoming unavailable...

PUF UDP Flooder

PUF UDP Flooder is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple UDP requests that can potentially cause an affected system to become temporarily unresponsive...

Progress OpenEdge 10 b Multiple Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23926/info OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits can allow attackers to cause the application to become unresponsive...

Microsoft Windows XP/VISTA '.ani' File 'tagBITMAPINFOHEADER' Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38579/info Microsoft Windows is prone to a remote denial-of-service vulnerability when processing '.ani' files. Successful exploits will cause the vulnerable applications that use the affected APIs to crash or become...

RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities

No description provided by source. RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities Vulnerable: v3.0.7.x Vendor: www.rj-itop.comhttp://www.rj-itop.com Category: Input Validation Error Impact: SQL injection Details: ========= Multiple SQL Injection Vulnerabilitie...

Movable Type Pro 5.13en Stored XSS Vulnerability

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Source URL: http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html Keywords: CVE-2012-1503, Movable Type Pro 5.13en, Stored XSS, JavaScript Injection, Vendor Unresponsive, Full Disclosure...

dreamMail e-mail client 4.6.9.2 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: dreamMail e-mail client Version: 4.6.9.2 Vendor Site: http://www.dreammail.eu Software Download: http://www.dreammail.eu/intl/en/download.html Tested on: Windows XP SP3 Eng. Tested on: Window...

Mah-Jong 1.4/1.6 Server Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8558/info A remote denial of service vulnerability has been reported to affect the mah-jong game server. The issue has been reported to be exploitable so that a remote attacker may trigger a tight loop in the affected...

Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes...

openSUSE Security Update : chromium (openSUSE-SU-2014:0243-1)

Chromium was updated to version 32.0.1700.102: Stable channel update : - Security Fixes : - CVE-2013-6649: Use-after-free in SVG images - CVE-2013-6650: Memory corruption in V8 - and 12 other fixes - Other : - Mouse Pointer disappears after exiting full-screen mode - Drag and drop files into...

IBM Global Security Kit 7 < 7.0.4.50 / 8.0.14.x < 8.0.14.43 / 8.0.50.x < 8.0.50.20 Multiple Vulnerabilities

The remote Windows host has a version of IBM Global Security Kit prior to 7.0.4.50 / 8.0.14.43 / 8.0.50.20. It is, therefore, affected by the following vulnerabilities : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow nonce...

IBM Global Security Kit 7 < 7.0.4.50 / 8.0.14.x < 8.0.14.43 / 8.0.50.x < 8.0.50.20 Multiple Vulnerabilities (Linux)

The remote Linux host has a version of IBM Global Security Kit prior to 7.0.4.50 / 8.0.14.43 / 8.0.50.20. It is, therefore, affected by the following vulnerabilities : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow nonce...

Anonymous DoSer Denial of Service Tool

Anonymous DoSer is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple HTTP requests that can potentially cause attacked systems to become temporarily unresponsive...

GoldenEye Denial of Service Tool

GoldenEye is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple HTTP requests that can potentially cause attacked systems to become temporarily unresponsive...

libpng denial-of-service vulnerability

Overview libpng versions 1.6.0 through 1.6.9 contain a denial-of-service vulnerability. Description CWE-835: Loop with Unreachable Exit Condition 'Infinite Loop' - CVE-2014-0333Glenn Randers Pehrson of the PNG Development Group reports: The progressive decoder in libpng16 enters an infinite loop,...

Stable Channel Update

Chrome has been updated to 32.0.1700.102 for Windows, Mac, Linux and Chrome Frame. This update has fixes for the following issues: Mouse Pointer disappears after exiting full-screen mode. 317496 Drag and drop files into Chrome may not work properly. 332579 Quicktime Plugin crashes in Chrome. 3084...

Design/Logic Flaw

ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service unresponsive IRC via multiple Client-To-Client Protocol CTCP requests in a PRIVMSG message...

Multiple Vulnerabilities in Cisco Web Security Appliance (cisco-sa-20130626-wsa)

According to its self-reported version, the version of Cisco Web Security Appliance running on the remote host has the following vulnerabilities : - Multiple unspecified vulnerabilities exist in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...

iOS 6.0-6.1.3 MobileSafari Crash

Crashes MobileSafari. Tested on iOS 6.0-6.1.3 Doxen now=new Date; document.writenow+""; document.write""; for i =0;i'; var str="DOXEN!"; document.writestr.toUpperCase; var d=new Date; document.writed.getFullYear; var d=new Date; document.writed.getTime + " ml sn 1994/08/10 swag"; 0day.today...

KIK Messenger Password Disclosure

KIK Messenger stores password in plain text This is the conclusion of Mobile Security Company, a Dutch organisation specialized in security audits of mobile applications. The username and password are stored in the com.kik.chat.plist file. This file can be viewed on a jailbroken device or when...