Airlock WAF 4.2.4 - Overlong UTF-8 Sequence Bypass

Airlock WAF 4.2.4 - Overlong UTF-8 Sequence Bypass SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Airlock WAF overlong UTF-8 sequence bypass product: Airlock vulnerable version: = 4.2.4 without hotfix HF4213 fixed...

Airlock WAF 4.2.4 - Overlong UTF-8 Sequence Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Airlock WAF overlong UTF-8 sequence bypass product: Airlock vulnerable version: = 4.2.4 without hotfix HF4213 fixed version: 4.2.5 impact: critical homepage:...

python: potential XSS in SimpleHTTPServer's list_directory()

The listdirectory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting XSS...

python: potential XSS in SimpleHTTPServer's list_directory()

The listdirectory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting XSS...

PT-2012-2008 · Microsoft +3 · Internet Explorer +3

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.5.6c1 Python versions 2.6.x prior to 2.6.7 rc2 Python versions 2.7.x prior to 2.7.2 Description: The issue concerns the list directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer, which does not include ...

[SECURITY] [DSA 2464-2] icedove regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2464-2 [email protected] http://www.debian.org/security/ Florian Weimer May 08, 2012 http://www.debian.org/security/faq -...

Skype 5.8.0.156 UTF-8符号消息拒绝服务漏洞

BUGTRAQ ID: 52810 Skype是免费的全球语音沟通软件。 Skype的Windows v5.6.59.10 & Mac OS v5.5.2340客户端在实现上存在空指针引用造成的内存破坏漏洞，攻击者可通过发送特制的符号消息利用此漏洞造成受影响应用崩溃。 0 Skype 5.8.0.156 厂商补丁： Skype ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.skype.com/...

vBulletin 4.1.7 => 4.1.10 XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: vBulletin 4.1.7 = 4.1.10 XSS Vulnerability Google Dork: intitle: powered by vBulletin 4.1.10 Date: 20/02/2012 Author: .e0f Software Link: http://www.vbulletin.com/ Version: 4.1.10 Others not tested Tested on: BackTrack 5 |...

Pidgin < 2.10.2 Multiple DoS

The version of Pidgin installed on the remote host is earlier than 2.10.2 and is potentially affected by the following issues : - A denial of service vulnerability NULL pointer dereference in the 'pidginconvchatrenameuser' function in 'gtkconv.c'. Remote attackers can trigger the vulnerability by...

DedeCMS V5.7 SP1 UTF-8 GBK版本shopcar.class.php被植入后门

No description provided by source...

Pidgin Multiple Denial of Service Vulnerabilities - Windows

Pidgin is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin Multiple Denial of Service Vulnerabilities (Windows)

This host is installed with Pidgin and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginmultdosvulnwin.nasl 5940 2017-04-12 09:02:05Z teissa $ Pidgin Multiple Denial of Service Vulnerabilities Windows Authors: Madhuri D Copyright: Copyright c 2012...

CVE-2012-1178

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

Design/Logic Flaw

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

CVE-2012-1178

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

CVE-2012-1178

The msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8 encoding...

Pidgin 2.x 多个拒绝服务漏洞

Pidgin是一款多协议即时通信软件 Pidgin存在多个安全漏洞，允许攻击者进行拒绝服务攻击 -处理XMPP聊天室中的昵称更改时"getiterfromchatbuddy"函数pidgin/gtkconv.c存在空指针引用错误，可被利用进行拒绝服务攻击 -处理UTF-8编码消息时"msnoimreporttouser"函数libpurple/protocols/msn/oim.c存在错误，可被利用进行拒绝服务攻击 0 Pidgin 2.x 厂商解决方案 Pidgin 2.10.2已经修复此漏洞，建议用户下载使用： http://www.pidgin.im...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : eglibc, glibc vulnerabilities (USN-1396-1)

It was discovered that the GNU C Library did not properly handle integer overflows in the timezone handling code. An attacker could use this to possibly execute arbitrary code by convincing an application to load a maliciously constructed tzfile. CVE-2009-5029 It was discovered that the GNU C...

Ubuntu Update for eglibc USN-1396-1

Ubuntu Update for Linux kernel vulnerabilities USN-1396-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13961.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for eglibc USN-1396-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

[USN-1396-1] GNU C Library vulnerabilities

========================================================================== Ubuntu Security Notice USN-1396-1 March 09, 2012 eglibc, glibc vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivative...