Internet Explorer Event Handling Memory Corruption (MS10-071) - Ver2 (CVE-2010-3326)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this issue, an attacker may create a malicious web page that will...

Microsoft Office Art Drawing Records Code Execution (MS10-087) - Ver2 (CVE-2010-3334)

Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A remote attacker could exploit this issue via a malformed Office file. Successful exploitation of this vulnerability may allow execution of...

CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

Android 26 Kernel Level SD card Write Denial of Service - Ver2 (CVE-2013-1773)

A denial-of-service vulnerability has been reported in Linux kernel before version 3.3. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)

A file inclusion vulnerability has been reported in Joomla Webring Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Internet Explorer Center Element Remote Code Execution (MS12-037) - Ver2 (CVE-2012-1523)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has been deleted. A remote attacker could trigger this vulnerability by enticing an unsuspecting victim to open a...

Wireshark LWRES Dissector getaddrsbyname Buffer Overflow - Ver2 (CVE-2010-0304)

A buffer overflow vulnerability has been reported in Wireshark. The vulnerability is due to insufficient boundary checking in the getaddrsbyname method. A remote attacker may exploit this vulnerability by sending an overly long string parameter to this method. Successful exploitation would allow...

Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)

A file inclusion vulnerability has been reported in Joomla Webring Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Digium Asterisk Manager User Shell Command Execution - Ver2 (CVE-2012-2414)

A security bypass vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in the way the server validates permissions while executing shell commands from unauthorized users. A remote attacker can exploit this issue by sending specially crafted AMI requests to the...

Microsoft Visual Basic 6 Enterprise SP6 vb6stkitdll Buffer Overflow - Ver2 (CVE-2008-2959)

A buffer overflow vulnerability has been reported in Microsoft Visual Basic Enterprise Edition. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

AltN WebAdmin USER Buffer Overflow - Ver2 (CVE-2003-0471)

A buffer overflow vulnerability has been reported in Alt-N Webadmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Peercast URL Format String Exploit Code Execution - Ver2 (CVE-2005-1806)

A code execution vulnerability has been reported in Peercast. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Flash Player OP_inclocal and OP_declocal Memory Corruption (APSB12-22) - Ver2 (CVE-2012-5271)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to memory access without bounds checking while verifying certain opcodes. A remote attacker can exploit this issue by enticing the victim to open a specially crafted SWF file with an affected versi...

Oracle Java AtomicReferenceArray Sandbox Breach Code Execution - Ver2 (CVE-2012-0507)

A code execution vulnerability has been reported in Oracle Java SE. The vulnerability is due to a design flaw in the implementation of the AtomicReferenceArray class in Java SE. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted Java application...

Apple CUPS cupsdDoSelect Remote Code Execution attack - Ver2 (CVE-2009-3553)

A code execution vulnerability has been reported in Apple Cups. An attacker could exploit this vulnerability via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. Successful exploitation of this vulnerability could allow a...

Firefox nsTreeContentView Use After Free - Ver2 (CVE-2010-0176)

A use-after-free vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla SeaMonkey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Novell eDirectory evtFilteredMonitorEventsRequest Invalid free Code Execution - Ver2 (CVE-2006-4510)

A code execution vulnerability has been reported in Novell eDirectory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

BEA WebLogic SSL Handling Denial of Service weblogic attack - Ver2 (CVE-2004-2424)

A denial-of-service vulnerability has been reported in BEA Systems WebLogic Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)

An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...

Hikvision DVR Basic Authentication Buffer Overflow (CVE-2014-4880)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker to inject and execute arbitrary code on t...

Hikvision DVR Request Header and Request Body Buffer Overflow (CVE-2014-4878; CVE-2014-4879)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Request Header Handling and Request Body Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker ...

Adobe Flash Player Information Disclosure (APSB14-27: CVE-2014-9162)

An Information Disclosure Vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker could exploit these vulnerability by enticing a target user to open a crafted file...

Adobe Flash Player Double Free (APSB14-24: CVE-2014-0574)

A double free vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error caused by an attempt of the worker thread and the main thread to clear a shared ByteArray simultaneously. This vulnerability could lead to a crash of the player...

Adobe Flash Player Type Confusion Code Execution (APSB14-24: CVE-2014-0586)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

OpenSSL Multiple Invalid SRP Parameters Buffer Overflow (CVE-2014-3512)

A heap buffer overflow vulnerability exists in OpenSSL. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted TLS messages to the target. Successful exploitation could lead to arbitrary code execution in context of the OpenSSL server application...

PHP-Fusion Multiple SQL Injections (CVE-2014-8596)

SQL injection vulnerability has been reported in PHP-Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0584)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0585)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

Multiple Web Servers king injector Backdoor Command Execution

A command execution vulnerability has been reported in multiple Web servers. The vulnerability is due to the existence of a backdoor file on the Web server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

Technicolor DT5130 Router Command Injection (CVE-2014-9144)

A command injection vulnerability has been reported in Technicolor DT5130 Router. Successful exploitation would allow an attacker to execute commands in the security context of the logged on user...

Multiple Web Servers Smart Shell Backdoor Command Execution

A command execution vulnerability has been reported in multiple web servers. The vulnerability is due to the existence of a backdoor file on the web server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

ISC BIND Recursive Resolver Resource Consumption Denial of Service (CVE-2014-8500)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a design weakness in the way BIND follows DNS delegations. A remote attacker can exploit these vulnerabilities by sending a request to a recursive resolver forcing the resolver to issue a large number possibly...

WebRooT Hack Tools

A command execution vulnerability has been reported in multiple PHP servers. The vulnerability is due to the existence of a backdoor file on the PHP server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

Microsoft Graphics Component Information Disclosure (MS14-085) - ver 2 (CVE-2014-6355)

An information disclosure vulnerability has been reported in the Microsoft Graphics Component. The vulnerability is due to the way Microsoft Graphics Component improperly handles the decoding of JPEG images in memory. A remote attacker can exploit this vulnerability by enticing a user to download...

ManageEngine NetFlow Analyzer And IT360 DisplayChartPDF Directory Traversal (CVE-2014-5446)

A directory traversal vulnerability exists in ManageEngine Netflow Analyzer and IT360. The vulnerability is due to lack of authentication and insufficient input validation on the filename parameter sent to the DisplayChartPDF servlet in HTTP requests. A remote unauthenticated attacker can downloa...

ManageEngine EventLog Analyzer Hostdetails Information Disclosure (CVE-2014-6039)

An information disclosure vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to a failure to restrict access to confidential data in the HostDataServlet servlet...

Adobe Flash Player Privilege Escalation (APSB14-24; CVE-2014-8442; CVE-2015-3101)

A privilege escalation vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Acrobat and Adobe Reader Deflate Parameter Integer Overflow (CVE-2009-3459)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. Successful exploitation of this issue will cause the application to become non-responsive, and m...

WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)

An information disclosure vulnerability has been reported in WordPress Slider Revolution Plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to disclosure of database credentials...

Adobe Flash Player Memory Corruption (APSB14-26: CVE-2014-8439)

A write what where vulnerability exists in Adobe Flash Player. The vulnerability is due to a memory corruption when handling ByteArray objects. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted file. A successful attack could result in the execution of...

FreePBX Framework Asterisk Recording Interface unserialize Code Execution (CVE-2014-7235)

A code execution vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the index.php file of the recordings directory...

Fast Wordpress Index Changer

Fast Wordpress Index Changer is a computer program that allows users to change Wordpress index pages. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

Adobe Flash Player Heap Buffer Overflow (APSB14-24: CVE-2014-0583)

A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-0581)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

PHP Web Shell Generic Backdoor (CVE-2020-24186)

An attacker might upload a web shell backdoor to a PHP server. A successful exploitation might allow the attacker to run arbitrary code, or use the server as a bot for further attacks...

Adobe Flash Player Stack Buffer Overflow (CVE-2014-9163)

A stack-based buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient sanity check. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Web Servers CryptoPHP Backdoor

Some free themes for Joomla, WordPress and Drupal CMS include a backdoor to the service. By installing these themes the system administrator installs the CryptoPHP backdoor...

Joomla and Wordpress Mass Defacer Tool

Joomla and Wordpress Mass Defacer is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

Microsoft Internet Explorer Use After Free Remote Code Execution (CVE-2014-8967)

A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error while handling certain objects when processing HTML and script code. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafte...

Horny Monkey Deface Maker Tool

Horny Monkey Deface Maker is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...