203 matches found
Google Android 2.3.5 - PowerVR SGX Driver Information Disclosure
// source: https://www.securityfocus.com/bid/57900/info The PowerVR SGX driver in Android is prone to an information-disclosure vulnerability. Successful exploits allows an attacker to gain access to sensitive information. Information obtained may aid in further attacks. Android 2.3.5 and prior...
CVE-2010-4767
CVE-2010-4767 affects Open Ticket Request System (OTRS) prior to version 2.3.6. The issue arises in how the system processes email messages where the From header contains UTF-8 characters with diacritical marks alongside an invalid charset, enabling a remote attacker to cause a DoS by sending a c...
Woltlab Burning Board 2.3.6 addon SQL injection vulnerability-vulnerability warning-the black bar safety net
Woltlab Burning Board is a PHP, MySQL backend support of the WEB forum program. Woltlab Burning Board 2.3.6 in the hilfsmittel. php plug-ins existSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: Woltlab Burning Board 2.3.6 Addon hilfsmittel.php SQL Injectio...
Fedora 13 : mod_fcgid-2.3.6-1.fc13 (2010-17434)
This update to the current upstream maintenance release includes a fix for a possible stack buffer overwrite CVE-2010-3872. It also changes the default value of FcgidMaxRequestLen from 1GB to 128K; administrators should change this to an appropriate value based on site requirements. Other changes...
Invision Power Board Local File Include and SQL Injection Vulnerabilities
Invision Power Board is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
New vulnerabilities in Invision Power Board
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Insufficient Anti-automation уязвимостях в форумном движке Invision Power Board. Information Leakage: http://site/index.php?act=Login В IPB существует ещё одна возможность, в дополнение к предыдущим...
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat...
Python 'Imageop'模块参数验证缓冲区溢出漏洞
BUGTRAQ ID: 31932 CNCAN ID：CNCAN-2008102806 Python是一款开放源代码的脚本编程语言。 Python 'Imageop'模块的不正确参数验证，远程攻击者可以利用漏洞进行缓冲区溢出而触发segfault错误。 目前没有详细漏洞细节提供，可能导致任意代码执行。 Python Software Foundation Python 2.5.2 Python Software Foundation Python 2.5.1 Python Software Foundation Python 2.4.5 Python Software Foundatio...
CVE-2008-4346
CVE-2008-4346 : TalkBack has a directory traversal vulnerability allowing remote attackers to include and execute arbitrary local files via the language parameter. Affected versions include TalkBack 2.3.5 and other versions before 2.3.6.2 (and similar vector in comments.php as noted in CVE-2008-4...
Debian Security Advisory DSA 1635-1 (freetype)
The remote host is missing an update to freetype announced via advisory DSA 1635-1. OpenVAS Vulnerability Test $Id: deb16351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1635-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Information disclosure
TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...
Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns
No description provided by source. + Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 :...
talkback-lfidisclose.txt
Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 : http://target/path/comments.php?language=Local File%00 Example 1 :...
Talkback 2.3.6 - Multiple Local File Inclusion PHPInfo Disclosure Vulnerabilities
Talkback 2.3.6 - Multiple Local File Inclusion PHPInfo Disclosure Vulnerabilities + Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion...
Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns
Exploit for unknown platform in category web applications ===================================================================== Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns ===================================================================== + Talkback 2.3.6 Multiple Loc...
Talkback 2.3.6 - Multiple Local File Inclusion / PHPInfo Disclosure Vulnerabilities
Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 : http://target/path/comments.php?language=Local File%00 Example 1 :...
FreeBSD Ports: freetype2
The remote host is missing an update to the system as announced in the referenced advisory. VID 4fb43b2f-46a9-11dd-9d38-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Python存在多个缓冲区溢出漏洞
BUGTRAQ ID: 30491 CVE ID：CVE-2008-2315 CVE-2008-2316 CVE-2008-3142 CVE-2008-3143 CVE-2008-3144 CNCVE ID：CNCVE-20082315 CNCVE-20082316 CNCVE-20083142 CNCVE-20083143 CNCVE-20083144 Python是一款开放源代码的脚本编程语言。 Python中存在多个整数溢出漏洞，远程攻击者可以利用漏洞对应用程序进行拒绝服务或者任意代码执行攻击。 1...
FreeType invalid free() flaw
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary PFB file, which triggers a free of arbitrary memory locations, leading to memory corruption...
