CVE-2010-1462

Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter...

CVE-2010-1462: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter...

Online official is to be brush library-vulnerability warning-the black bar safety net

This and modify the score the same way. Today comparing the stuffy, just up ripped two sentences, with regard to the brush library on this thing The brush Gallery, is update money=1 0 0 0 0 0 0, a businessman used to call the brush points, sounds like a very NB, looks worship, in fact, also just...

Debian DSA-2014-1 : moin - several vulnerabilities

Several vulnerabilities have been discovered in moin, a python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0668 Multiple security issues in MoinMoin related to configurations that have a non-empty superuser list, the xmlrpc...

Apache < 2.2.15 Multiple Vulnerabilities

Binary data 5356.prm...

Apache < 2.2.15 Multiple Vulnerabilities

According to its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.15. Such versions are potentially affected by multiple vulnerabilities : - A TLS renegotiation prefix attack is possible. CVE-2009-3555 - The 'modproxyajp' module returns the wrong status code if it...

Algorithm Stops Local Scanning Worms

Researchers at Penn State University have developed an algorithm that defends against the spread of local scanning worms that search for hosts in “local” spaces within networks or sub-networks. This strategy allows them access to hosts that are clustered, which means once they infect one host, th...

Sub Station Alpha 4.08 - '.rt' Local Buffer Overflow (PoC)

/Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header= "\x3C\x77\x69\x6E\x64\x6F\x77\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x32\x35\x30\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x33\x30"...

Sub Station Alpha v4.08 .rt file Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== Sub Station Alpha v4.08 .rt file Local Buffer Overflow PoC ========================================================== /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0...

Sub Station Alpha 4.08 Buffer Overflow

/Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header= "\x3C\x77\x69\x6E\x64\x6F\x77\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x32\x35\x30\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x33\x30"...

Sub Station Alpha 4.08 - .rt Local Buffer Overflow (PoC)

Sub Station Alpha 4.08 - .rt Local Buffer Overflow PoC /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header=...

Q&A: Eugene Spafford on Cybercrime, Security Research

Threatpost editor Dennis Fisher talks with Eugene Spafford of Purdue’s CERIAS center about cybercrime, funding for long-term security research projects and whether the federal cybersecurity coordinator position matters. Fisher: Do you see any indications that there will be more funding coming fro...

PHP Inventory 1.2 - Authentication Bypass

PHP Inventory 1.2 - Authentication Bypass PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

Illogator Shop Cross Site Scripting

------------------------ - ILLOGATOR SHOP / XSS - ------------------------ index.php?section=bycategory&subcatid=4&subname=xss EXAMPLE : http://illogator.com/index.php?section=bycategory&subcatid=4&subname=%3CSCRIPT%20SRC%3Dhttp%3A%2F%2Fha.ckers.org%2Fxss.js%3E%3C%2FSCRIPT%3E...

MySQL 5.1 < 5.1.41 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.41 and is, therefore, potentially affected by the following vulnerabilities : - An incomplete fix was provided in 5.1.24 for CVE-2008-2079, a symlink-related privilege escalation issue. Bug 39277 - MySQL clients linked...

MySQL 5.0 < 5.0.88 Multiple Vulnerabilities

The version of MySQL 5.0 installed on the remote host is earlier than 5.0.88. It is, therefore, potentially affected by the following vulnerabilities : - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. Bug 47320 - The GeomFromWKB function can be manipulated to...

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service source: https://www.securityfocus.com/bid/37297/info MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions. An attacker can exploit these issues to crash the...

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service

source: https://www.securityfocus.com/bid/37297/info MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions. An attacker can exploit these issues to crash the application, denying access to legitimate users. Versions prior to MySQL...

CVE-2009-2841

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

Design/Logic Flaw

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...