O-Kiraku Nikki v1.3 SQL inj. vuln.

O-Kiraku Nikki v1.3 SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/o-kiraku-nikki-v13-sql-inj-vuln.html Vendor:http://www.ag0ny.com/okiraku.php affected version:v1.3 and prior Product Description: 'O-Kiraku Nikki' is Japanese for 'A...

os-x/PPC/x86 execve"/bin/sh",{"/bin/sh",NULL},NULL 121 bytes

os-x/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 121 bytes. Shellcode exploits for multiple platform / - dual.c - by [email protected] execve"/bin/sh","/bin/sh",NULL,NULL shellcode for osx both the ppc and x86 version. Sample output: -nemo@squee:/shellcode$ file dual-ppc dual-ppc: Mach-O...

os-x/PPC/x86 execve("/bin/sh",{"/bin/sh",NULL},NULL) 121 bytes

Exploit for multiple platform in category shellcode ============================================================== os-x/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 121 bytes ============================================================== / - dual.c - by email protected...

CVE-2005-3003: Undefined Security Weakness

SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the 1 o or 2 sort parameters...

CVE-2002-2011

Cross-site scripting XSS vulnerability in the fom CGI program fom.cgi in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter...

CVE-2002-2011

The CVE-2002-2011 entry concerns Faq-O-Matic’s fom.cgi (versions 2.711 and 2.712). The issue is a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the file parameter, potentially enabling/script execution in the victim’s browser. Documented im...

CVE-2002-2011: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the fom CGI program fom.cgi in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter...

FreeBSD : perl -- vulnerabilities in PERLIO_DEBUG handling (a5eb760a-753c-11d9-a36f-000a95bc6fae)

Kevin Finisterre discovered bugs in perl's I/O debug support : - The environmental variable PERLIODEBUG is honored even by the set-user-ID perl command usually named sperl or suidperl. As a result, a local attacker may be able to gain elevated privileges. CVE-2005-0155 - A buffer overflow may occ...

CVE-2002-1668

HP-UX 11.11 and earlier allows local users to cause a denial of service kernel deadlock, due to a "file system weakness" that is possibly via an mmap system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file...

CVE-2005-0975

Integer signedness error in the parsemachfile function in the mach-o loader machloader.c for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service CPU consumption via a crafted mach-o header...

security flaw

Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction...

CVE-2005-0975

Integer signedness error in the parsemachfile function in the mach-o loader machloader.c for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service CPU consumption via a crafted mach-o header...

CVE-2005-0975

CVE-2005-0975 describes an integer signedness error in the Darwin kernel’s mach-o loader (mach_loader.c) used by Mac OS X 10.3.7 and earlier versions (before 10.3.9). The vulnerability allows local users to cause a denial of service (CPU consumption) by presenting a crafted mach-o header. The pro...

CVE-2005-0975: Undefined Security Weakness

Integer signedness error in the parsemachfile function in the mach-o loader machloader.c for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service CPU consumption via a crafted mach-o header...

CVE-2004-1772: Undefined Security Weakness

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...

CVE-2005-0295

The CVE-2005-0295 entry concerns npptnt2.sys in nProtect Gameguard, where the kernel driver exposes unrestricted I/O to any process that calls it. This lack of access control permits local users to gain privileges, i.e., a local privilege escalation. The description and connected sources consiste...

CVE-2005-0295: Undefined Security Weakness

npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges...

perl -- vulnerabilities in PERLIO_DEBUG handling

Kevin Finisterre discovered bugs in perl's I/O debug support: The environmental variable PERLIODEBUG is honored even by the set-user-ID perl command usually named sperl or suidperl. As a result, a local attacker may be able to gain elevated privileges. CVE-2005-0155 A buffer overflow may occur in...

CVE-2005-0295

npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges...

Faq-O-Matic fom.cgi Multiple Parameter XSS

The remote host runs Faq-O-Matic, a CGI-based system that automates the process of maintaining a FAQ. The remote version of this software is vulnerable to cross-site scripting attacks in the script 'fom.cgi'. With a specially crafted URL, an attacker can cause arbitrary code execution resulting i...