postgresql: substring() negative length argument buffer overflow

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service daemon crash or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT...

postgresql: substring() negative length argument buffer overflow

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service daemon crash or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT...

Ubuntu Update for PostgreSQL vulnerability USN-933-1

Ubuntu Update for Linux kernel vulnerabilities USN-933-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9331.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for PostgreSQL vulnerability USN-933-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

PostgreSQL DoS

Crash on substring function in SQL...

[USN-933-1] PostgreSQL vulnerability

=========================================================== Ubuntu Security Notice USN-933-1 April 28, 2010 postgresql-8.1, postgresql-8.3, postgresql-8.4 vulnerability CVE-2010-0442 =========================================================== A security issue affects the following Ubuntu releases...

Joomla! Component Media Mall Factory 1.0.4 - Blind SQL Injection

Joomla! Component Media Mall Factory 1.0.4 - Blind SQL Injection =========================================================================================================== o Joomla Component Media Mall Factory Blind SQLi Vulnerability Software : commediamall version 1.0.4 Vendor :...

phpscripte24 Vor und Rückwärts Auktions System - Blind SQL Injection

phpscripte24 Vor und Rückwärts Auktions System - Blind SQL Injection ----------------------------Information------------------------------------------------ +Name : phpscripte24 Vor und Rückwärts Auktions System Blind SQL Injection auktion.php +Autor : Easy Laster +Date : 02.04.2010 +Script :...

Profi Einzelgebots Auktions System - Blind SQL Injection

----------------------------Information------------------------------------------------ +Name : Profi Einzelgebots Auktions System 1 -----------------------------------------------------------------------------------------...

DEBIAN-CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

PostNuke FormExpress Module - Blind SQL Injection

PostNuke FormExpress Module - Blind SQL Injection Date: 17/03/2010 Software Link: http://sourceforge.net/projects/pn-formexpress/ Version: 0.3.2 PostNuke ContentExpress Module Blind Sql Injection Reported by Sharif University of Technology CSIRT Vulnerability Analysis and Penetration Testing Grou...

CVE-2003-1578

Sun ONE aka iPlanet Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning...

Joomla Component Com_Joomclip (cat) SQL injection

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Component ComJoomclip cat SQL injection + Author : 599eme Man + Contact : [email protected]...

Joomla! Component Com_Joomclip - 'cat' SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Component ComJoomclip cat SQL injection + Author : 599eme Man + Contact : [email protected]...

Joomla Extion IF Portfolio Nexus SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

ITechBids 8.0 (itechd.php productid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " ITechBids v8.0 Blind SQL Injection Exploit \n"; print " \n"; print " itechd.php productid...

PunBB Reputation.php Mod 2.0.4 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Reputation.php Mod newPOST = $Host; my $Cookies = new HTTP::Cookies; my $HTTP = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Referrer = "formsent=1&pid=10174&poster=Dante90, WaRWolFz...

GLinks 2.1 (cat) Remote Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= GLinks 2.1 cat Remote Blind SQL Injection Vulnerability ========================================================= + GLinks v2.1 cat Remote Blind SQL Injection Vulnerability + Softwa...

GLinks 2.1 Blind SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 Remote Blind SQL injection + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Str0ke, Neocoderz, Sheiry, Shimik Root aka...

bSpeak 1.10 SQL Injection

-------------------------AllaH AkbaR------------------------------- forum bspeak v1.10 Blind SQL Injection Exploit ------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.php Chi3aro...

Joomla! Component com_gsticketsystem - 'catid' Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge = strlen...