Oracle GlassFish Server Administration Console Authentication Bypass - Ver2 (CVE-2011-1511)

An authentication bypass vulnerability has been reported in the administration console of Oracle GlassFish. The vulnerability is due to an error while processing HTTP TRACE requests. A remote attacker can exploit this vulnerability by sending a crafted TRACE request to the target. Successful...

Microsoft Office Double Delete Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6333)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...

Internet Explorer HTML CSS Tag Rendering Memory Corruption (MS10-018) - Ver2 (CVE-2010-0807)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may create a malicious web page that will cause Internet Explorer to exit unexpectedly...

Microsoft Excel Sheet Object Type Confusion (MS10-017) - Ver2 (CVE-2010-0258)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Internet Explorer HTML Help Remote Code Execution (MS05-001) - Ver2 (CVE-2004-1043)

Microsoft Internet Explorer executes with the concept of security zones, which enables the browser to apply different security policies based on the origin of the file that is being rendered. For instance, separate restrictions may be set for remote content and for local content. As a rule,...

Microsoft Windows Graphics Rendering Engine Buffer Overflow (MS04-032) - Ver2 (CVE-2004-0209)

The Microsoft Windows Metafile Format WMF is used to store pictures and other graphical renderings as either vector or bitmap-format graphical data. The vector data stored in WMF files is described as Microsoft Windows Graphics Device Interface GDI commands. The WMF format is the original 16-bit...

Microsoft DirectShow Size Validation Remote Code Execution (MS09-028) - Ver2 (CVE-2009-1539)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The vulnerability is due to an error in the Microsoft DirectShow component that fails to properly validate certain size fields within...

Mozilla Firefox Proxy Prototype Remote Code Execution (CVE-2014-8636)

A remote code execution vulnerability has been detected in Mozilla Firefox. A remote attacker may exploit this vulnerability by enticing users to open a specially crafted web-page. Successful exploitation would allow an attacker to execute arbitrary code in the user's security context...

Ultra Mini HTTPD Resource Name Request Handling Stack Buffer Overflow - Ver2 (CVE-2013-5019)

A buffer overflow vulnerability has been reported in Vector Ultra Mini HTTPD. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Drupal Core XML-RPC Endpoint xmlrpc.php Internal Entity Expansion Denial of Service - Ver2 (CVE-2014-5265)

A denial of service vulnerability has been reported in Drupal Core. This can cause a very high CPU load and memory exhaustion. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service on the vulnerable system...

LupperA XMLRPC Propagation Request Code Execution - Ver2 (CVE-2005-1921)

A code execution vulnerability has been reported in Pear XML RPC. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite - Ver2 (CVE-2005-3657)

The McAfee Security Center application is meant to allow users to set preferences and settings for numerous installed McAfee components and services, such as the anti-virus component VirusScan, the Personal Firewall Plus, the Privacy Service, or the SpamKiller component. The Security Control Cent...

Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)

The Microsoft Internet Explorer application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. This application has a built in functionality to interpret JavaScript and VBScript code. It is also capable of using the Document...

Microsoft Word RTF Object Parsing Memory Corruption (MS08-072) - Ver2 (CVE-2008-4030)

Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...

Mozilla Firefox Download Directory File Deletion - Ver2 (CVE-2004-2225)

A vulnerability in the way Mozilla Firefox handles file download operations has been reported. The vulnerability is triggered when a victim saves a remote resource that uses a specific scheme. An attacker could exploit this vulnerability to remove files in the user download directory...

Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)

The Microsoft Internet Explorer application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. This application has a built in functionality to interpret JavaScript and VBScript code. It is also capable of using the Document...

Mozilla Firefox Floating Layer Column Layout Denial of Service - Ver2 (CVE-2007-0775)

A denial-of-service vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla SeaMonkey. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Wireshark SigComp UDVM Dissector Remote Code Execution - Ver2 (CVE-2010-2287)

A buffer overflow vulnerability has been reported in Wireshark. The vulnerability is due to incorrect implementation of the SigComp UDVM Dissector. An attacker can exploit this issue by sending a malicious sigComp traffic in the internet...

Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007) - Ver2 (CVE-2012-0007)

An information disclosure vulnerability has been reported in the Microsoft Anti-Cross Site Scripting AntiXSS Library. The vulnerability is due to the way the AntiXSS Library incorrectly evaluates certain characters after a CSS escaped character is detected. A remote attacker may exploit this issu...

Dnsmasq Malicious BLKSIZE Option NULL Dereference Denial of Service (CVE-2009-2958)

A denial-of-service vulnerability has been reported in Thekelleys Dnsmasq. The vulnerability is due to a NULL pointer dereference in the tftprequest function inside src/ftpd.c. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on t...

Ingres Database Communications Server Component Heap Buffer Overflow - Ver2 (CVE-2007-3334)

Ingres developed a relational database product named Ingres Database. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors such as Computer Associates CA. A heap buffer overflow vulnerability exists in Ingres Database...

Mozilla Firefox XSL Transformation Memory Corruption - Ver2 (CVE-2009-1169)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Adobe Flash Player Cross Domain Policy Bypass (APSB15-05: CVE-2015-0340)

Adobe Flash Player is vulnerable to a cross domain policy bypass. If a maliciously crafted file is opened on the target computer, it could initiate a file upload without a user initiated action and to another domain without verifying the cross domain policy...

Symantec Web Gateway OS Command Injection (CVE-2014-7285; CVE-2016-5313)

A remote command execution vulnerability has been reported in Symantec Web Gateway. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious HTTP request containing a specially crafted parameter to the target server...

Adobe Flash Player Use After Free Remote Code Execution (APSB15-05: CVE-2015-0341)

A Use-after-free vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error while handling nested objects in the swf file. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted swf file, that can lead to execute...

Domain Name Fake SSL Certificate

A vulnerability has been discovered in the way Microsoft Windows handles digital certificates. The vulnerability is due to an improperly issued SSL certificate for the domain “live.ly”. Successful exploitation could allow a remote attacker to perform a man-in-the-middle attack on the remote host...

Adobe Flash Player Memory Corruption (APSB15-05: CVE-2015-0337)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB15-05: CVE-2015-0333)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Integer Overflow Remote Code Execution (APSB15-05: CVE-2015-0338)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer overflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...

Adobe Flash Player Memory Corruption (APSB15-05: CVE-2015-0332)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted MP4 file. A remote attacker can exploit this issue and lead to code execution...

Adobe Flash Player Memory Corruption (APSB15-05: CVE-2015-0339)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Type Confusion Code Execution (APSB15-05: CVE-2015-0334)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

Microsoft PowerPoint Malformed Record Code Execution (MS06-058) - ver 2 (CVE-2006-4694)

A memory corruption vulnerability has been reported in Microsoft PowerPoint. The flaw is caused by an insufficient checks of a malformed record contained within a PowerPoint file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the...

Shodan.io Internet Of Things Portal

Shodan is a search engine for Internet-connected devices, which may be used to discover vulnerable devices connected to the Internet, as a preliminary stage before launching an attack...

Masscan Port Scanner

Masscan is a port scanning product. Use of this product might indicate an attempt to collect data regarding the target network, and use it for future attacks...

Acunetix Web Scanner

Acunetix is a vulnerability scanning product. Remote attackers can use Acunetix to detect vulnerabilities on a target server...

Mozilla Firefox WebRTC Man-in-the-Middle Attack (CVE-2015-0834)

A security bypass vulnerability has been reported in Mozilla Firefox browser. The vulnerability is due to a weakness in the WebRTC protocol. The vulnerability can be exploited through the use of a man-in-the-middle attack. Successful exploitation would allow attackers to decrypt online traffic...

Jays Shell Booter Denial of Service Tool

Jays Shell Booter is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple HTTP requests that can potentially cause attacked systems to become temporarily unresponsive. Note: This protection is supported from version R75.40VS and above and cannot b...

AWStats Plugin Multiple Remote Command Execution (CVE-2005-0363)

A command execution vulnerability has been reported in AWStats. The vulnerability is due to failing of AWStats CGI script to properly sanitize user provided parameters. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the target system...

HappyMall E-Commerce Software Member_HTML.CGI Command Execution (CVE-2003-0243)

A command Execution Vulnerability has been reported in HappyMall E-Commerce Software. The vulnerability is due to improper filtering of the normalhtml.cgi / memberhtml.cgi scripts, while passing pipe and semi-colon characters in the URL. A remote attacker can create a specially crafted URL to cau...

FireFlood Denial of Service Tool

FireFlood is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple HTTP requests that can potentially cause attacked systems to become temporarily unresponsive. Note: This protection is supported from version R75.40VS and above and cannot be enforc...

WordPress Contact Form DB Plugin Cross-Site Scripting (CVE-2015-2040)

A cross-site scripting vulnerability has been reported in WordPress Contact Form DB Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

JavaScript String Inflation Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript String Reversal Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript Data Encoding Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript String Dissection Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

Wordpress Reflex Gallery Plugin Arbitrary File Upload

An unauthorized file upload vulnerability has been reported in Wordpress Reflex Gallery Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...

Microsoft Windows Netlogon Spoofing (MS15-027; CVE-2015-0005)

A spoofing vulnerability exists in the Netlogon service. The vulnerability is caused when the Netlogon service improperly establishes a secure communications channel, when given a computer name, without challenging for credentials. A remote attacker may exploit this issue by sending a specially...

Microsoft Internet Explorer Elevation of Privilege (MS15-018: CVE-2015-1627)

An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...

Microsoft Windows ATMFD Font Driver Remote Code Execution (MS15-021: CVE-2015-0092)

A remote code execution vulnerability has been reported in Microsoft Windows ATMFD Font Driver. The vulnerability is due to an error in Font Driver while improperly overwriting objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted file...