47153 matches found
perl-Proc-ProcessTable symbolic links vulnerabilities
Symbolic links vulnerabilities on /tmp/TTYDEVS processing...
SPICE DoS
assert on loops processing...
Samba DoS
Memory exhaustion on malformed nttrans request processing...
libtiff multiple security vulnerabilities
Vulnerabilities in different utilities...
CVE-2013-4124 samba nttrans dos private exploit
Hi Forks! It's my samba private exploit and article of it. the security bug occurs while nttrans reply in samba daemon source code tree. the remote dos exploit that i copied from another nttrans exploit in 2003. and can't test it yet, check it out! CVE-2013-4124 samba dos private exploit: -...
FreeBSD ip_multicast integer overflow
Integer overflow on buffer size calculation in IPMSFILTER...
[ MDVSA-2013:216 ] perl-Proc-ProcessTable
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:216 http://www.mandriva.com/en/support/security/ Package : perl-Proc-ProcessTable Date : August 23, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Updated perl-Proc-ProcessTab...
[ MDVSA-2013:219 ] libtiff
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:219 http://www.mandriva.com/en/support/security/ Package : libtiff Date : August 23, 2013 Affected: Business Server 1.0 Problem Description: Updated libtiff packages fix security vulnerabilities: Pedro Ribei...
Oracle Java multiple security vulnerabilities
40 different vulnerabilities...
Multiple vulnerabilities on Sitecom N300/N600 devices
Multiple vulnerabilities on Sitecom N300/N600 devices ===================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on Sitecom N300/N600 devices Discovery date: 01/06/2013 Release date: 19/08/2013 Credits: Roberto Paleari [email protected],...
Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities
Title: ====== Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities Date: ===== 2013-08-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1047 VL-ID: ===== 1047 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============...
Linksys EA access points authentication bypass
It's possible to access web administration without authentication...
x90c WOFF Firefox 1day exploit
Hi Forks! I share my WOFF 1day exploit. attachment: http://www.x90c.org/exploits/x90cWOFFexploit.tgz dep bypass vulnerability: CVE-2010-1028 WOFF Heap Corruption due to Integer Overflow affacted Products: - Mozilla Firefox 3.6 Gecko 1.9.2 - Mozilla Firefox 3.6 Beta1, 3, 4, 5 Beta2 ko not released...
Update: Linksys EA2700, EA3500, E4200v2, EA4500 Unspecified unauthenticated remote access
----------------------------------------------------------------------------- Vulnerabilities: An unspecified bug can cause an unsafe/undocumented TCP port to open allowing for: - Unauthenticated remote access to all pages of the router administration GUI, bypassing any credential prompts under...
Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities
Title: ====== Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities Date: ===== 2013-08-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1047 VL-ID: ===== 1047 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============...
Многочисленные уязвимости в Mozilla Firefox / Seamonkey multiple security vulnerabilities
Multiple memory corruptions, integer overflows, array index overflows, information leak...
Sitecom wireless routers multiple security vulnerabilities
Undocumented hardcoded accounts, undocumented telnet access, weak WPA and administrator accounts generation...
libXfont memory corruption
Memory corruption on compressed font parsing...
Microsoft Active Directory Federation Services information leakage
It's possible to obtain service account information to cause account locking via unsuccessful logon attempts...
Microsoft Exchange Oracle libraries security vulnerabilities
Outlook Web Access vulnerabilities because of vulnerable Oracle Outside In libraries...
PuTTY / WinSCP security vulnerabilities
SSH handshake heap buffer overflow, protection bypass, information leakage...
[SECURITY] [DSA 2736-1] putty security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2736-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 11, 2013 http://www.debian.org/security/faq -...
[PSA-2013-0811-1] Oracle Java storeImageArray() Invalid Array Indexing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0811-1 | | http://packetstormsecurity.com/ | +------------------------------------------------------------------------------+ | Title: Oracle...
CORE-2013-0708 - Hikvision IP Cameras Multiple Vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Hikvision IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: Hikvision IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0708 Advisory URL:...
Apache suEXEC privilege elevation / information disclosure
Apache suEXEC privilege elevation / information disclosure Discovered by Kingcope/Aug 2013 The suEXEC feature provides Apache users the ability to run CGI and SSI programs under user IDs different from the user ID of the calling web server. Normally, when a CGI or SSI program executes, it runs as...
[security bulletin] HPSBMU02902 rev.1 - HP Integrated Lights-Out iLO3, iLO4 IPMI Cipher Suite 0 Authentication Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03844348 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03844348 Version: 1 HPSBMU02902 rev....
Apache mod_dav_svn DoS
Assertion failure on COPY, DELETE and MOVE commands processing...
Apache suexec security vulnerabilities
Protection bypass, privilege escalation...
Cisco Wide Area Application Services, CDS, VDS, CDM code execution
Code execution via HTTP POST request, privilege escalation...
[security bulletin] HPSBHF02912 rev.1 - HP Networking Products including H3C and 3COM Routers and Switches, OSPF Remote Information Disclosure and Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03880910 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03880910 Version: 1 HPSBHF02912 rev....
Netresec NetworkMiner security vulnerabilities
Code execution, directory traversal...
Huawei B153 router information leakage
WPA2 key leakage without authentication...
gnupg / libcrypt RSA implementation flush+reload timing attack
Private key recovery by using CPU L3 cache timings...
[slackware-security] gnupg / libgcrypt (SSA:2013-215-01)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security gnupg / libgcrypt SSA:2013-215-01 New gnupg and libgcrypt packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. New libgpg-error packages are also available for Slackware 13....
Cisco IOS / ASA / FWSM / NX-OS / StarOS OSPF protocol vulnerability
LSA packet routing table manipulation...
HP Data Protector code execution
Unauthorized perl commands execution...
Hikvision IP Cameras multiple security vulnerabilities
Code execution, protection bypass, information leakage...
HP Integrated Lights-Out authentication bypass
No description provided...
SEC Consult SA-20130805-0 :: Vodafone EasyBox Default WPS PIN Algorithm Weakness
SEC Consult Vulnerability Lab Security Advisory 20130805-0 ======================================================================= title: Vodafone EasyBox Default WPS PIN Algorithm Weakness product: EasyBox 802 & EasyBox 803 vulnerable version: EasyBox 802 - all versions EasyBox 803 - Production...
NGS00434 Technical Advisory: Oracle Hyperion 11 Directory Traversal
======= Summary ======= Name: Oracle Hyperion 11 - Directory Traversal Release Date: 30 July 2013 Reference: NGS00434 Discoverer: Richard Warren [email protected] Vendor: Oracle Vendor Reference: S0318807 Systems Affected: Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1.129...
HP SiteScope code execution
Code execution via SOAP...
D-Link DIR-645 unauthroized access
It's possible to obtain administration password without authentication, crossite scripting, buffer overflow...
Security vulnerabilities in different Ruby Gems
VUlnerabilities in different libraries...
Cisco TelePresence security vulnerabilities
DoS, directory traversal, backdoor account...
Oracle / Sun / MySQL / PeopleSoft applications multiple security vulnerabilities
Quarterly CPU fixes 89 dufferent vulnerabilities...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Memory corruptions, buffer overflows, crossite data access, crossite scripting, information spoofing, privilege escalation, protection bypass, code execution, information leakage...
[ MDVSA-2013:209 ] subversion
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:209 http://www.mandriva.com/en/support/security/ Package : subversion Date : August 6, 2013 Affected: Business Server 1.0 Problem Description: A vulnerability has been found and corrected in subversion: The...
Two Vulnerabilities in NetworkMiner : DLL Hijacking + Directory Traversal
Security Advisory ID: NETRESEC-1386968 http://netresec.com/?b=1386968 NetworkMiner version 1.4.1 and older is vulnerable to DLL hijacking and contains a directory traversal vulnerability. ==Description== NetworkMiner is a tool designed for network forensics and network security monitoring. It is...
CORE-2013-0618 - Multiple Vulnerabilities in TP-Link TL-SC3171 IP Cameras
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiple Vulnerabilities in TP-Link TL-SC3171 IP Cameras 1. Advisory Information Title: Multiple Vulnerabilities in TP-Link TL-SC3171 IP Cameras Advisory ID: CORE-2013-0618 Advisory URL:...
HP Data Protector Arbitrary Remote Command Execution
""" HP Data Protector Arbitrary Remote Command Execution This script allows to execute a command with an arbitrary number of arguments. The trick calls 'perl.exe' interpreter installed with HP Data Protector inside the directory installpath/bin/. The main goal of the script is to bypass the...