Linksys WVC54GCA Wireless-G '/img/main.cgi' Information Disclosure

The remote host is a Linksys WVC54GCA network camera. The version of the firmware of the remote camera contains a flaw that allows authenticated users to download the .htpasswd file from the remote host, which gives them the ability to crack the passwords of other users, including the password of...

HP StorageWorks Storage Mirroring Software存在多个远程漏洞

BUGTRAQ ID: 34611 CVE ID：CVE-2009-0716 CVE-2009-0717 CVE-2009-0718 CNCVE ID：CNCVE-20090716 CNCVE-20090717 CNCVE-20090718 HP StorageWorks Storage Mirroring存储镜像软件是一款基于主机的连续复制解决方案。 HP StorageWorks Storage Mirroring软件存在多个安全问题，远程攻击者可以利用漏洞进行任意代码执行，拒绝服务和未授权访问攻击。 目前没有详细漏洞细节提供。 HP HP StorageWorks Storage...

Symantec Products KeyView \"wp6sr.dll\" Buffer Overflow

CVE-2008-4564 Symantec Products KeyView "wp6sr.dll" Buffer Overflow Secunia Advisory: SA34307 Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment Release Date: 2009-03-17 Last Update: 2009-03-18 Popularity: 658 views...

IBM Director <= 5.20.3su2 CIM Server Remote DoS Vulnerability

No description provided by source. SEC-CONSULT Security Advisory 20090305-1 ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable version: = 5.20....

AIX 610000 : U818437

The remote host is missing AIX PTF U818437 which is related to the security of the package bos.rte.bosinst You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610000 : U823800

The remote host is missing AIX PTF U823800 which is related to the security of the package devices.common.IBM.sissas.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

NextApp Echo XML Injection

SEC Consult Security Advisory ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 me...

Magento 1.2.0 Cross Site Scripting

Magento Multiple Cross-Site Scripting Vulnerabilities - Security Advisory - SOS-09-002 Release Date. 24-Feb-2009 Vendor Notification Date. 21-Jan-2009 Product. Magento Platform. Linux / PHP verified, possibly others Affected versions. Magento 1.2.0 verified, possibly others Severity Rating. Mediu...

Libero Cross Site Scripting

Libero Cross-Site Scripting Vulnerability - Security Advisory - SOS-09-001 Release Date. 23-Feb-2009 Vendor Notification Date. 20-Oct-2008 Product. Libero Platform. Windows verified, possibly others Affected versions. Libero v5.3 SP5 verified, possibly others Severity Rating. Medium Impact...

Enomaly ECP多个安全漏洞

BUGTRAQ ID: 33544 CVECAN ID: CVE-2008-4990,CVE-2009-0390 Enomaly ECP（之前名为Enomalism）是用于管理虚拟机的软件。 ECP的enomalism2.sh中存在多个安全漏洞，本地攻击者可以通过符号链接攻击以root用户权限覆盖任意系统文件、向kill命令注入参数以终止任意进程或向进程发送信号，或导致虚拟机无法启动。 Enomaly Elastic Computing Platform 2.1 临时解决方法： 将PIDFILE从/tmp/enomalism2.pid更改为/var/run/enomalism2.pid。...

Nokia Phoenix Service Software ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 33726 Nokia Phoenix Service Software是用于刷机诺基亚手机的软件。 Nokia Phoenix Service...

ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability

ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-011 February 10, 2009 -- CVE ID: CVE-2009-0075 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Custome...

iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 01.13.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 13, 2009 I. BACKGROUND Oracle Secure Backup is a network backup system for Oracle Databases. For more information, see:...

iDefense Security Advisory 12.10.08: Microsoft Excel Malformed Object Memoy Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 09, 2008 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is availabl...

iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.02.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 02, 2008 I. BACKGROUND The Sun Java JRE is Sun's implementation of the Java runtime. For more information, see the vendor's site found at the following link...

[TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: VLC media player RealMedia Processing Integer Overflow Vulnerability Advisory ID: TKADV2008-013 Revision: 1.0 Release Date: 2008/11/30 Last Modified: 2008/11/30 Date Reported: 2008/11/14 Author: Tobias Klein tk at trapkit.de Affected Softwar...

ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability

ZDI-08-076: EMC Control Center SAN Manager SSTSENDFILE Remote File Retrieval Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-076 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remo...

Team SHATTER Security Advisory: Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager November 12, 2008 Risk Level: High Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

iDefense Security Advisory 11.03.08: Multiple Vendor CUPS SGI imagetops Heap Overflow Vulnerability

iDefense Security Advisory 10.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2008 I. BACKGROUND The Common UNIX Printing System, more commonly referred to as CUPS, provides a standard printer interface for various Unix based operating systems. "imagetops" is a part of CUPS...

[TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: VLC media player TiVo ty Processing Stack Overflow Vulnerability Advisory ID: TKADV2008-010 Revision: 1.0 Release Date: 2008/10/20 Last Modified: 2008/10/20 Date Reported: 2008/10/18 Author: Tobias Klein tk at trapkit.de Affected Software: V...