Intel® Security Vulnerabilities

e2eSoft VCam DLL Hijacking

...

Torrent DVD Creator DLL Hijacking

...

ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSAR Authentication Client when storing secret key objects on an RSA SecurIDR 800 Authenticator

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSA® Authentication Client when storing secret key objects on an RSA SecurID® 800 Authenticator RSA Authentication Client.....

[STANKOINFORMZASCHITA-10-01] Netbiter® webSCADA multiple vulnerabilities

[STANKOINFORMZASCHITA-10-01] Netbiter® webSCADA – multiple vulnerabilities Authors: Eugene Salov ([email protected]), Andrej Komarov ([email protected]) Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:R/C:C/I:C/A:C) Impact Subscore: 10.0 Exploitability Subscore: 8.0...

Acteaveidia Portals Read web.config Vulnerability

Exploit for php platform in category web...

Netbiter webSCADA Disclosure

...

Nwahy Web Site Dir 2.2 Database Disclosure Exploit

Exploit for php platform in category web...

Cisco IOS Software Network Address Translation Vulnerabilities

The Cisco IOS® Software Network Address Translation functionality contains three denial of service (DoS) vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol (SIP) packets, the second vulnerability in the translation of H.323 packets and the third...

Cisco IOS Software Internet Group Management Protocol Denial of Service Vulnerability

A vulnerability in the Internet Group Management Protocol (IGMP) version 3 implementation of Cisco IOS® Software and Cisco IOS XE Software allows a remote unauthenticated attacker to cause a reload of an affected device. Repeated attempts to exploit this vulnerability could result in a sustained...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities

Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS® Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled. Cisco has released software updates that address these...

Cisco IOS Software H.323 Denial of Service Vulnerabilities

The H.323 implementation in Cisco IOS® Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software. Cisco has released software updates that address these vulnerabilities....

Cisco IOS SSL VPN Vulnerability

Cisco IOS® Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...

BoutikOne SQL Injection

...

BoutikOne v1 SQL Injection Vulnerability

Exploit for php platform in category web...

BoutikOne 1.0 - SQL Injection

BoutikOne 1.0 - SQL...

BoutikOne 1.0 - SQL Injection

...

Adobe LiveCycle ES DLL Hijacking

...

ESA-2010-014: RSA, The Security Division of EMC, releases security hot fixes for potential vulnerability in RSA® Access Manager Server under certain conditions.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-014: RSA, The Security Division of EMC, releases security hot fixes for potential vulnerability in RSA® Access Manager Server under certain conditions. Security Advisory Updated August 31, 2010 Summary: RSA Access Manager Server contains a...

ESA-2010-016: RSA, The Security Division of EMC, releases security hot fix for a potential vulnerability in RSA® Access Manager Agent when working with RSA® Adaptive Authentication.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-016: RSA, The Security Division of EMC, releases security hot fix for a potential vulnerability in RSA® Access Manager Agent when working with RSA® Adaptive Authentication Security Advisory Updated September 2, 2010 Summary: RSA Access...

Второе пришествие: бэкдор в БД (+ бонусный фишинг-код)

Рассмотрим, как можно использовать MySQL для сохранения доступа к ресурсу после обнаружения взлома и "чистки". // Специально для rdot.org // Перепечатка без большой, жирной ссылки на источник разрешена только мудацким ресурсам. Типичные рекомендации администратору веб-сервера по действиям...

SiteEngine CMS 5.1.0 文件上传漏洞

网站引擎(SiteEngine,全称：博卡网站引擎管理系统)，是北京博卡先锋软件开发有限公司于2002年自主研发的，具有知识产权的一款营销型网站建设管理类软件。同时，网站引擎于2004年通过中国软件评测中心CSTC软件产品测试，是获得国家信息产业部认可的软件产品。 软件基于PHP程序和Mysql数据库开发，完全采用B/S体系结构，无客户端，可跨Unix/Lin- ux/FreeBSD/Solaris/Windows(2000/XP/2003/Vista)等操作系统平台应用....

LeadTools ActiveX Raster Twain 16.5 - 'LtocxTwainu.dll' Buffer Overflow (PoC)

...

Leadtools ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Buffer Overflow

Exploit for windows platform in category dos /...

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow (PoC)

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow...

LEADTOOLS ActiveX Raster Twain 16.5 Buffer Overflow

...

Adobe Device Central CS5 3.0.1.0 DLL Hijacking Exploit

...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Title: Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit Advisory ID: ZSL-2010-4952 Type: Local/Remote Impact: System Access Risk: (4/5) Release Date: 26.08.2010 Summary The ExtendScript Toolkit (ESTK) 3.5.0 is a scripting utility included with Adobe® Creative Suite...

Adobe ExtendedScript Toolkit CS5 3.5.0.52 DLL Hijacking Exploit

...

Adobe Device Central CS5 v3.0.1.0 (dwmapi.dll) DLL Hijacking Exploit

Title: Adobe Device Central CS5 v3.0.1.0 (dwmapi.dll) DLL Hijacking Exploit Advisory ID: ZSL-2010-4950 Type: Local/Remote Impact: System Access Risk: (4/5) Release Date: 26.08.2010 Summary Adobe® Device Central CS5 software simplifies the production of innovative and compelling content for...

Adobe ExtendedScript Toolkit CS5 3.5.0.52 - 'dwmapi.dll' DLL Hijacking

...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking (dwmapi.dll)

Exploit for windows platform in category local...

Adobe ExtendedScript Toolkit CS5 3.5.0.52 - dwmapi.dll DLL Hijacking

Adobe ExtendedScript Toolkit CS5 3.5.0.52 - dwmapi.dll DLL...

ESA-2010-013: RSA, The Security Division of EMC, informs about potential security vulnerability in RSA enVision® versions prior to 3.7 SP1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RSA, The Security Division of EMC, informs about potential security vulnerability in RSA enVision® versions prior 3.7 SP1 Security Advisory Updated July 30, 2010 Summary: RSA enVision versions prior 3.7 SP1 may contain potential denial of service...

Intel® Math Kernel Library Insecure File Permission Local Privilege Escalation

**Summary: ** The Intel® Math Kernel Library (Intel® MKL) is a library of highly optimized, extensively threaded math routines for science, engineering, and financial applications that require maximum performance. An updated version of the software is available for Intel® MKL users to mitigate...

OpenSSL* vulnerability – Software Development Tools for Intel® Active Management Technology (Intel® AMT)

*Summary: ** In response to the OpenSSL advisory (CVE-2010-0740), Intel is releasing an update to the Intel® Active Management Technology (Intel® AMT) Software Development Kit (SDK)and Intel® Setup and Configuration Service (Intel® SCS) to mitigate this vulnerability. This issue does not affect...

Corel WordPerfect Office X5 15.0.0.357 Buffer Overflow

...

Saint Corporation Cross Site Scripting / HTML Injection

...

Corel WordPerfect Office X5 15.0.0.357 (wpd) Buffer Overflow PoC

Exploit for windows platform in category dos /...

Corel WordPerfect Office X5 15.0.0.357 - 'wpd' Buffer Overflow (PoC)

...

Corel Presentations X5 15.0.0.357 (shw) Remote Buffer Preoccupation PoC

Title: Corel Presentations X5 15.0.0.357 (shw) Remote Buffer Preoccupation PoC Advisory ID: ZSL-2010-4946 Type: Local/Remote Impact: System Access, DoS Risk: (4/5) Release Date: 12.07.2010 Summary Strengthen your visual impact. Create compelling slideshows, proposals, demonstrations and...

Corel WordPerfect Office X5 15.0.0.357 (wpd) Remote Buffer Preoccupation PoC

Title: Corel WordPerfect Office X5 15.0.0.357 (wpd) Remote Buffer Preoccupation PoC Advisory ID: ZSL-2010-4945 Type: Local/Remote Impact: System Access, DoS Risk: (4/5) Release Date: 12.07.2010 Summary Corel® WordPerfect® Office X5 – Standard Edition is the essential office suite for word...

Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow (PoC)

Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow...

Sysax Multi Server 5.25 Denial Of Service

...

Sysax Multi Server "open", "unlink", "mkdir", "scp_get" Commands DoS Vulnerabilities

[]Title: Sysax Multi Server(SFTP module) "open", "unlink", "mkdir", "scp_get" Commands DoS Vulnerabilities []Product: Sysax Multi Server []Vendor: Codeorigin, LLC []Version: 5.25 (earlier versions may also be affected) []Platform: Windows []Type of Vulnerability: Buffer...

Sysax Multi Server (SFTP module) Multiple Commands DoS Vulnerabilities

Exploit for windows platform in category dos /...

Sysax Multi Server 5.25 (SFTP Module) - Multiple Denial of Service Vulnerabilities

Sysax Multi Server 5.25 (SFTP Module) - Multiple Denial of Service...

Sysax Multi Server < 5.25 (SFTP Module) - Multiple Denial of Service Vulnerabilities

...

Corel VideoStudio Pro X3 Boundary Condition

...

Corel VideoStudio Pro X3 (.mp4) Buffer Overflow

Exploit for windows platform in category dos /...

Corel VideoStudio Pro X3 - '.mp4' Buffer Overflow

...