Digital Security Research Group [DSecRG] Advisory #DSECRG-09-001

Digital Security Research Group DSecRG Advisory DSECRG-09-001 Application: Oracle Application Server SOA Versions Affected: Oracle Application Server SOA version 10.1.3.1.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 10.01.2008 Vendor response: 11.01.2008 Date of Public...

Oracle Application Server Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-001 Application: Oracle Application Server SOA Versions Affected: Oracle Application Server SOA version 10.1.3.1.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 10.01.2008 Vendor response: 11.01.2008 Date of Public...

CentOS Security Advisory CESA-2009:0005 (gnome-vfs2)

The remote host is missing updates to gnome-vfs2 announced in advisory CESA-2009:0005. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Joomla com_gigcal SQL Injection

Joomla Component comgigcalgigcalgigsid SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : SQL injection Google Dork : inurl:comgigcal -------------------------------------------------- ! Name : GigCalendar ! creationDate :...

CentOS Security Advisory CESA-2009:0005 (gnome-vfs2)

The remote host is missing updates to gnome-vfs2 announced in advisory CESA-2009:0005. CESA-2009:0005 63351 8 $Id: ovcesa20090005.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0005 gnome-vfs2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

FileZilla FTP Server Admin Interface Denial of Service

This module triggers a Denial of Service condition in the FileZilla FTP Server Administration Interface in versions 0.9.4d and earlier. By sending a procession of excessively long USER commands to the FTP Server, the Administration Interface FileZilla Server Interface.exe when running, will...

CentOS 3 / 4 : gnome-vfs2 (CESA-2009:0005)

Updated GNOME VFS packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and...

FreeBSD Ports: p5-File-Path

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: p5-File-Path

The remote host is missing an update to the system as announced in the referenced advisory. VID 13b0c8c8-bee0-11dd-a708-001fc66e7203 OpenVAS Vulnerability Test $ Description: Auto generated from VID 13b0c8c8-bee0-11dd-a708-001fc66e7203 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD : p5-File-Path -- rmtree allows creation of setuid files (13b0c8c8-bee0-11dd-a708-001fc66e7203)

Jan Lieskovsky reports : perl-File-Path rmtree race condition CVE-2005-0448 was assigned to address this This vulnerability was fixed in 5.8.4-7 but re-introduced in 5.8.8-1. It's also present in File::Path 2.xx, up to and including 2.07 which has only a partial fix. %NASLMINLEVEL 70300 C Tenable...

PT-2009-1304 · Web Scribble Solutions · Webclassifieds

Name of the Vulnerable Software and Affected Versions: Web Scribble Solutions webClassifieds 2005 Description: The issue concerns SQL injection vulnerabilities in the index.php file of webClassifieds 2005. Remote attackers can execute arbitrary SQL commands by manipulating the user and password...

Linux/x86 - Socket-proxy Shellcode (372 bytes) (Generator)

Linux/x86 - Socket-proxy Shellcode 372 bytes Generator. Shellcode exploit for Generator platform /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by Russell Sanford - [email protected]...

webClassifieds 2005 Login Bypass

webClassifieds™© 2005 Admin Login Bypass vulnerability Prodcut: webClassifieds™© 2005 Home : http://www.webscribble.com/ Vunlerability : Admin Bypass Risk : low Dork : "powered by webClassifieds" Discovred by: AnGeL25dZ From : Constantine - Algeria Contact : [email protected] Greetz to : ALLAH...

webClassifieds 2005 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. webClassifieds™© 2005 Admin Login Bypass vulnerability Prodcut: webClassifieds™© 2005 Home : http://www.webscribble.com/ Vunlerability : Admin Bypass Risk : low Dork : "powered by webClassifieds" Discovred by: AnGeL25dZ From : Constantine - Algeria Contact :...

webClassifieds 2005 - Authentication Bypass

webClassifieds™© 2005 Admin Login Bypass vulnerability Prodcut: webClassifieds™© 2005 Home : http://www.webscribble.com/ Vunlerability : Admin Bypass Risk : low Dork : "powered by webClassifieds" Discovred by: AnGeL25dZ From : Constantine - Algeria Contact : [email protected] Greetz to :...

webClassifieds 2005 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= webClassifieds 2005 Auth Bypass SQL Injection Vulnerability ============================================================= webClassifieds © 2005 Admin Login Bypass vulnerability...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

Microsoft SQL Server sp_replwritetovarbin() BOF Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-004. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209)

Update to SEC Consult Security Advisory 20081210-0 Microsoft SQL Server spreplwritetovarbin limited memory overwrite vulnerability =================================================================== Summary: ------------ By calling the extended stored procedure spreplwritetovarbin, an attacker ca...

Debian: Security Advisory (DSA-1678-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...