CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

PT-2012-5460 · Mcrypt · Mcrypt

Name of the Vulnerable Software and Affected Versions: mcrypt versions 2.6.8 and earlier Description: The issue allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. It is not clear whether this is a vulnerability...

[SECURITY] Fedora 18 Update: mcrypt-2.6.8-10.fc18

MCrypt is a replacement for the old crypt package and crypt1 command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers...

SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass

SEC Consult Vulnerability Lab Security Advisory 20121017-0 ======================================================================= title: ModSecurity multipart/invalid part ruleset bypass product: ModSecurity vulnerable version: = 2.6.8 fixed version: 2.7.0 CVE number: - impact: Depends what you...

ModSecurity - POST Security Bypass

ModSecurity - POST Security Bypass source: https://www.securityfocus.com/bid/56096/info ModSecurity is prone to a security-bypass vulnerability because it fails to sufficiently sanitize user-supplied input. Successful exploits can allow attackers to bypass filtering rules; this may aid in further...

Python哈希冲突拒绝服务漏洞(CVE-2012-1150)

CVE ID: CVE-2012-1150 Python是一种面向对象、直译式计算机程序设计语言。 Python 2.6.8之前版本、2.7.x、3.x、3.2.x版本计算哈希值时没有预先限制哈希冲突，可允许攻击者通过向包含哈希表的应用发送特制的应用支持拒绝服务。 0 python 2.6.8 厂商补丁： Python ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： www.python.org...

Eclydre Web Manager Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PT-2012-2901 · Python +3 · Python +3

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.6.8 Python versions 2.7.x prior to 2.7.3 Python versions 3.x prior to 3.1.5 Python versions 3.2.x prior to 3.2.3 Description: The issue allows remote attackers to cause a denial of service, resulting in infinite loo...

Medium: python26

Issue Overview: SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an XML-RPC POST request that contains a smaller amount of dat...

Fwd: 2.6.6 <= phpMyFAQ <= 2.6.8 XSS

Hi, My name is Yam Mesicka, I'm from Israel and this is my first big disclosure so help needed is here :- I found XSS on phpMyFAQ system, versions 2.6.6 to 2.6.8. Dork: intitle:"Powered By phpMyFAQ 2.6.8" XSS: site-location/index.php/"scriptalert"XSS"/script Vul: 2.6.6 = phpMyFAQ = 2.6.8 The...

openSUSE Security Update : gimp (openSUSE-SU-2010:0115-1)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files CVE-2009-1570, CVE-2009-3909. Gimp was updated to to version 2.6.8 which fixes those issues. %NASLMINLEVEL 70300 C...

Gentoo Security Advisory GLSA 200605-05 (rsync)

The remote host is missing updates announced in advisory GLSA 200605-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1504-1 (kernel-source-2.6.8 (2.6.8-17sarge1))

The remote host is missing an update to kernel-source-2.6.8 2.6.8-17sarge1 announced via advisory DSA 1504-1. OpenVAS Vulnerability Test $Id: deb15041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1504-1 kernel-source-2.6.8 2.6.8-17sarge1 Authors: Thomas...

Debian DSA-1504-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-5823 LMH reported a potential local DoS which...

DSA-1504-1 kernel-image-2.6.8 - several issues

Bulletin has no description...

Joomla! Component jooget 2.6.8 - SQL Injection

Joomla! Component jooget 2.6.8 - SQL Injection joomla SQL Injectioncomjooget AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: id "comjooget" DORK 2 : allinurl: detail "comjooget" DORK 3 : allinurl: "comjooget" EXPLOIT :...

Debian Security Advisory DSA 1103-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1103-1. OpenVAS Vulnerability Test $Id: deb11031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1103-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1111-1 (kernel-source-2.6.8 et. al.)

The remote host is missing an update to kernel-source-2.6.8 et. al. announced via advisory DSA 1111-1. OpenVAS Vulnerability Test $Id: deb11111.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1111-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft...

Debian Security Advisory DSA 1304-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1304-1. OpenVAS Vulnerability Test $Id: deb13041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1304-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1111-2 (kernel-source-2.6.8 et. al.)

The remote host is missing an update to kernel-source-2.6.8 et. al. announced via advisory DSA 1111-2. OpenVAS Vulnerability Test $Id: deb11112.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1111-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft...