Zero Day Initiative Advisory 12-187 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application parses a particular array contained within a Real Media file and then uses the data. When allocating and reading frame size information, the application will fail to check the bounds of how this array is used. The application will use results in this array as an allocation for the size of a buffer. When initializing this new buffer, the application can then write outside it's bounds which will lead to code execution under the context of the application.
7f7a245921e96acbc1266832a2c321122ceba54fcacd0d720579d3be636c6813Having a preconfigured randomly generated WPA2-PSK passphrase for wireless routers is basically a good idea since a vendor-generated passphrase can be much more secure than most user-generated passwords. However, in the case of Belkin the default password is calculated solely based on the MAC address of the device. Since the MAC address is broadcasted with the beacon frames sent out by the device, a wireless attacker can calculate the default passphrase and then connect to the wireless network. Vulnerable versions include, but are not limited to, Belkin Surf N150 Model F7D1301v1, Belkin N900 Model F9K1104v1, Belkin N450 Model F9K1105V2, and possibly Belkin N300 Model F7D2301v1.
684453e25779c4ae90104f2addefb07264bc19185c67e2fec33fdde7ceba7c7cSplunk versions 4.0 through 4.3.4 suffer from an unauthenticated remote denial of service vulnerability against splunkd.
712c0f2ebc8a92c6651117dcb6b048dd30c332c12100a46fccd41ffa48f1183dMandriva Linux Security Advisory 2012-172 - Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. The updated packages have been patched to correct this issue.
02a25e5905882a2a706131a0db3229bdc2ff4621ce2936bd1a05e5416c3a6d68A filter bypass vulnerability in Akeni LAN (LE) Messenger version 1.2.118 allows for malicious script insertion / cross site scripting attacks.
a856de3fd6a5d3af851ebd5974741c479af215deb2422d936244be3106873f79Manage Engine Exchange Reporter version 4.1 suffers from multiple cross site scripting vulnerabilities.
88a98e8af73fd137f6bbd014be80a042c4c83acb3c1d6f43255c2ccbf4407a8eOmni-Secure versions 5, 6, and 7 suffer from a remote file disclosure vulnerability.
c7976e9f4319789ecff0baa4aac29390e943b06f256fba7cbb192d9a9f5ae6f1The Skype Account Service application suffered from a reset password/username vulnerability.
47ad6f50220ee53830173e0377be0516841a8b60569695b59844b96a36e1e0a7The Skype Account Service application suffered from a session token bypass vulnerability.
81e159aed334870a8fa4696621cdbdbfd9454dd6dac853d85e668dc983dc5061HostBox SSH is a python script will scan servers and routers for insecure SSH configurations.
357b430d5880a2895e02e42da73691c2a1ff1fed1383e9a6c9521150eb847208WeBid versions 1.0.5 and below suffer from a directory traversal vulnerability.
691fd6a645c981162b89806c3a38adbbac74928e9a8c6bdd1391a139433a93d9Debian Linux Security Advisory 2575-1 - It was discovered that ppm2tiff of the tiff tools, a set of utilities for TIFF manipulation and conversion, is not properly checking the return value of an internal function used in order to detect integer overflows. As a consequence, ppm2tiff suffers of a heap-based buffer overflow. This allows attacker to potentially execute arbitrary code via a crafted ppm image, especially in scenarios in which images are automatically processed.
95cfa80b845e14c6c0c830bb5c10f59eae3761c0da48aa072ed301a20ee9076eMicrosoft Office OneNote 2010 suffers from a WriteAV memory corruption vulnerability.
e7beebdffa62b0c8bab44b31791cda2bf7875af83b941a521c5aa933e91f031fSecunia Security Advisory - A vulnerability has been reported in the jNews component for Joomla!, which can be exploited by malicious people to compromise a vulnerable system.
5515abf4b7c444131012e5a44fdb24d641613275c32b43fd5f28a71623439d54Secunia Security Advisory - Some vulnerabilities have been reported in Sophos UTM, which can be exploit by malicious people to conduct cross-site scripting attacks and compromise a vulnerable system.
2ff3055165467c658b8247e3febf4d21d3616a3e4365ee96668db33b149ca001Secunia Security Advisory - A vulnerability has been reported in WeeChat, which can be exploited by malicious people to potentially compromise a user's system.
ccb96fd6ac335595f6bb070f9b1f37882aa301383ca71389809421b1eda751b3Secunia Security Advisory - Multiple vulnerabilities have been reported in RSA Data Protection Manager, where some have an unknown impact and others can be exploited by malicious, local users to gain escalated privileges and by malicious people to conduct cross-site scripting attacks.
0b6bdc6c195e2a4fe18b1ab74fe4d0801cea522e214c185779d63e136f749a28
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed