XiGroup (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== XiGroup news.php SQL Injection Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS...

openSUSE Security Update : lftp (openSUSE-SU-2010:0334-1)

This update of lftp improves the filename handling of downloaded files to avoid downloading arbitrary content to unexpected locations like .login. CVE-2010-2251 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CUPS texttops过滤器空指针引用漏洞

BUGTRAQ ID: 40943 CVE ID: CVE-2010-0542 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数 PostScript和raster打印机服务。 CUPS的texttops过滤器中缺少内存分配失败检查导致了空指针引用。攻击者可以创建恶意的文本文件，如果打印了该文件就会导致texttops崩溃或以lp用户权限执行任意代码。 Easy Software Products CUPS 1.4.4 厂商补丁： Easy Software...

Solaris 10 (sparc) : 145102-01

SunOS 5.10: wanboot patch. Date this patch was last updated by Sun : Jun/18/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Adobe Reader authplay.dll newfunction Memory Corruption

Added: 06/17/2010 CVE: CVE-2010-1297 BID: 40586 OSVDB: 65141 Background Adobe Reader is free software for viewing PDF documents. Problem A memory corruption vulnerability in authplay.dll provided with Adobe Reader 9.3.2 and earlier 9.x versions allows command execution when a user opens a special...

Adobe Reader authplay.dll newfunction Memory Corruption

Added: 06/17/2010 CVE: CVE-2010-1297 BID: 40586 OSVDB: 65141 Background Adobe Reader is free software for viewing PDF documents. Problem A memory corruption vulnerability in authplay.dll provided with Adobe Reader 9.3.2 and earlier 9.x versions allows command execution when a user opens a special...

Adobe Reader authplay.dll newfunction Memory Corruption

Added: 06/17/2010 CVE: CVE-2010-1297 BID: 40586 OSVDB: 65141 Background Adobe Reader is free software for viewing PDF documents. Problem A memory corruption vulnerability in authplay.dll provided with Adobe Reader 9.3.2 and earlier 9.x versions allows command execution when a user opens a special...

US-CERT Technical Cyber Security Alert TA10-159A -- Adobe Flash, Reader, and Acrobat Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA10-159A Adobe Flash, Reader, and Acrobat Vulnerability Original release date: June 08, 2010 Last revised: -- Source: US-CERT Systems Affected Adobe Flash Player 10.0.45.2 and earlier 10.x...

Security Advisory for Flash Player, Adobe Reader and Acrobat

Security Advisory for Flash Player, Adobe Reader and Acrobat Release date: June 4, 2010 Last updated: June 10, 2010 Vulnerability identifier: APSA10-01 CVE number: CVE-2010-1297 Platform: All Summary A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows,...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...

Joomla! Component ChronoConnectivity - Blind SQL Injection

Exploit Title: Joomla Component ChronoConnectivity Date: 01, June 2010 Author: mlk Renan Software Link: http://bugsec.googlecode.com/files/joomlachronoconnectivity.zip Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoConnectivity comchronoconnectivity - Blind SQL Injection...

CVE-2010-0595

creationtimestamp| type| source ---|---|--- 2010-05-27 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-10-147-01...

Solaris 10 (sparc) : 143739-01 (deprecated)

SunOS 5.10: Gedit patch. Date this patch was last updated by Sun : May/04/10 This plugin has been deprecated and either replaced with individual 143739 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

TeX Live predospecial()函数.dvi文件解析整数溢出漏洞

BUGTRAQ ID: 39500 CVECAN ID: CVE-2010-0739 TeX Live是用于创建TeX排版系统的工具。 TeX Live的dospecial.c文件中的predospecial函数在处理.dvi文件时存在最终可导致堆溢出的整数溢出漏洞。用户受骗打开了畸形的.dvi文件就可以触发这个溢出，导致以运行应用程序用户的权限执行任意代码。 TeX Live 3.0 TeX Live 2008 TeX Live 2007 TeX Live 2.0 TeX Live 1.0 厂商补丁： RedHat ------...

Solaris 9 (sparc) : 144323-01

SunOS 5.9: Resource Management User Interface Patch. Date this patch was last updated by Sun : May/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

Solaris 10 (x86) : 143732-01 (deprecated)

SunOS 5.10x86: libaudiofile patch. Date this patch was last updated by Sun : May/04/10 This plugin has been deprecated and either replaced with individual 143732 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 144326-01 (deprecated)

SunOS 5.10x86: Resource Management User I. Date this patch was last updated by Sun : May/03/10 This plugin has been deprecated and either replaced with individual 144326 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 9 (x86) : 144324-01

SunOS 5.9x86: Resource Management User Interface Patch. Date this patch was last updated by Sun : May/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Tadbir CMS (fckeditor) Remote Arbitrary File Upload Exploit Vulnerability

Exploit for php platform in category web applications ================================================================= Tadbir CMS fckeditor Remote Arbitrary File Upload Vulnerability ================================================================= Application Info: Name: Tadbir CMS Vendor:...