8653 matches found
I-RATER Basic Shell Upload Vulnerability
Exploit for unknown platform in category web applications ======================================== I-RATER Basic Shell Upload Vulnerability ======================================== ======================================================================================== | Title : I-RATER Basic She...
I-Escorts Directory - country_escorts.php?country_id SQL Injection
I-Escorts Directory - countryescorts.php?countryid SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err...
I-RATER Basic - Arbitrary File Upload
======================================================================================== | Title : I-RATER Basic Shell Upload Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...
kernel: SELinux and mmap_min_addr
The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to 1 the default configuration of the allowunconfinedmmapl...
CVE-2009-3939
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
CVE-2009-3939
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
CVE-2009-3939
CVE-2009-3939 affects the Linux kernel megaraid_sas driver: the poll_mode_io file has world-writable permissions in kernel 2.6.31.6 and earlier. This enables local users to change the driver I/O mode by modifying the file. The description notes local access and manipulation of driver behavior, wi...
CVE-2009-3939
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
IBM AIX 'rpc.cmsd'日历守护进程远程栈缓冲区溢出漏洞
Bugraq ID: 36615 IBM AIX是一款商业性质的操作系统。 IBM AIX rpc.cmsd存在缓冲区溢出问题，远程攻击者可以利用漏洞以root进程权限执行任意指令。 处理远程过程21的请求时存在漏洞，此函数接收两个参数，都为XDR字符串，当拷贝第一个参数到基于栈的缓冲区时，代码没有正确校验它的长度，可触发基于栈的缓冲区溢出。要利用此漏洞，攻击者需要通过RCP连接目标主机，不需要验证通过。 IBM Virtual I/O Server VIOS 2.1 IBM Virtual I/O Server VIOS 1.5.2 IBM Virtual I/O Server VIO...
Sql injection
SQL injection vulnerability in viewmag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the magid parameter, a different vector than CVE-2008-4465...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...
CVE-2009-3505
SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...
CVE-2009-3495
SQL injection vulnerability in viewmag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the magid parameter, a different vector than CVE-2008-4465...
Cross site scripting
Cross-site scripting XSS vulnerability in viewmag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via the magid parameter...
Sql injection
SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-3497
SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-3495
CVE-2009-3495 describes an SQL injection in view_mag.php of Vastal I-Tech DVD Zone, exploitable via the mag_id parameter to execute arbitrary SQL commands. This mirrors the vulnerability family seen in CVE-2008-4465 but with a different input vector. The description across sources confirms a remo...
CVE-2009-3496
CVE-2009-3496 describes a cross-site scripting (XSS) vulnerability in the Vastal I-Tech DVD Zone’s view_mag.php, exploitable via the mag_id parameter to inject arbitrary script/HTML. Affected component is the server-side script handling mag_id in that application. The connected documents corrobor...
CVE-2009-3505
SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...