7666 matches found
SuSE 10 Security Update : xen (ZYPP Patch Number 4766)
This update fixes various Xen issues. Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints. - Xen 3.1.1 does not prevent modification of the CR4 TSC from...
[Full-disclosure] IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption
The Domino Web Access Upload Module version 7.0.34.1 seems to suffer from a memory corruption issue that may allow the execution of arbitrary code. By setting the GeneralServerName property and calling the InstallBrowserHelperDll function it MAY be possible to control the ECX register and thereby...
CVE-2007-6496: Undefined Security Weakness
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...
Oreon 1.4 / Centreon 1.4.1 Multiple RFI Vulnerabilties
No description provided by source. By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is:...
123tkShop 0.9.1 Remote Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications ========================================================== 123tkShop 0.9.1 Remote Authentication Bypass Vulnerability ========================================================== By Michael Brooks Vulnerability:Sql Injection Software:123tkSh...
Oreon 1.4 Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities
Oreon 1.4 Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file...
123tkShop 0.9.1 - Remote Authentication Bypass
123tkShop 0.9.1 - Remote Authentication Bypass By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
123tkShop 0.9.1 - Remote Authentication Bypass
By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
[Full-disclosure] two bytehoard bugs
Application: Bytehoard Versions: 2.1 alpha to epsilon Release Date: 2007-11-26 Author: Ernesto Alvarez / Activesec SA Kudos to: Rodrigo Seguel / Activesec SA for suggesting the session destruction approach Contact info: ealvarez at activesec biz Developer response: None. No response to mail, foru...
EHCP 0.22.8 - Multiple Remote File Inclusions
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...
JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability
JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo20System/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...
runcms-lfi.txt
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versions also may be affected Exploitatio...
meBiblio-xss.txt
meBiblio 0.4.5 XSS --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : meBiblio 0.4.5 --------------------- Download : http://downloads.sourceforge.net/mebiblio/meBiblio-0.4.5.tar.gz?modtime=1195237984&bigmirror=0 --------------------...
two bytehoard 2.1 bugs
Application: Bytehoard Versions: 2.1 alpha to epsilon Release Date: 2007-11-26 Author: Ernesto Alvarez / Activesec SA Kudos to: Rodrigo Seguel / Activesec SA for suggesting the session destruction approach Contact info: ealvarez at activesec biz Developer response: None. No response to mail, foru...
Design/Logic Flaw
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...
超星阅览器Pdg2 ActiveX控件栈溢出漏洞
超星阅览器（SSReader）是是专门针对数字图书的阅览、下载、打印、版权保护和下载计费而研究开发的图书阅览器。 超星阅览器的Pdg2 ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 超星阅览器的Pdg2 ActiveX控件（pdg2.dll）没有正确地处理对Register方式所传送的参数，如果用户受骗访问了恶意网页并向该方式传送了超过256字节的超长参数的话，就可以触发栈溢出，导致执行任意代码。 超星集团神州科创技术有限公司 SSReader 4.0 超星集团神州科创技术有限公司 ----------------------------...
CVE-2007-5906
Xen 3.1.1 allows virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints...
CVE-2007-5906
Xen 3.1.1 allows virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints...
CVE-2007-5906
CVE-2007-5906 affects Xen 3.1.1 where a local-privilege user in a virtual guest can trigger a hypervisor crash by using a DR7 breakpoint, causing a denial of service. The issue is documented by SUSE and other vendors; remediation is to upgrade Xen to a fixed version (updates reference Xen 3.1.2 i...