Debian: Security Advisory (DSA-1952-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200912-02 (rails)

The remote host is missing updates announced in advisory GLSA 200912-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-6264

creationtimestamp| type| source ---|---|--- 2009-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10832...

phpcms 2008 search_ajax.php sql注入漏洞

No description provided by source...

CVE-2008-0747

creationtimestamp| type| source ---|---|--- 2009-12-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10650...

CVE-2008-0135

creationtimestamp| type| source ---|---|--- 2009-12-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10639...

Linux Kernel 2.6.18 < 2.6.18-20 - Local Privilege Escalation

/ Author: DigitALL Version: 2.6.18-20 Tested on: Linux System Greetz To: Zombie KroNicKq and All 1923turk.Biz Members Code : 2.6.18 2008 Exploit's s Edited 2009 Version.I Am Tested 2.6.18-20 2009 Linux is Rooted.Coming Soon.By DigitALL EDB Note: Adding include may help it compile / define GNUSOUR...

CVE-2009-4379

Multiple cross-site scripting XSS vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924...

CVE-2009-4379

Multiple cross-site scripting XSS vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924...

Security fix for the ALT Linux 5 package netatalk version 2.0.5-alt1

Dec. 22, 2009 Sergey Kurakin 2.0.5-alt1 - 2.0.5: + fix CVE-2008-5718 + more bugfixes...

IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

This module exploits a stack buffer overflow in the IBM Tivoli Storage Manager Express Remote Client Agent service. By sending a "dicuGetIdentify" request packet containing a long NodeName parameter, an attacker can execute arbitrary code. NOTE: this exploit first connects to the CAD service to...

MPlayer demux_open_vqf TwinVQ File Handling Buffer Overflow (CVE-2008-5616)

MPlayer is an open source multimedia player for Linux that is also available in a Mac OS X and Windows versions. It can play many audio and video formats MPEG, DivX, ogg, TwinVQ, etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. There exists ...

McAfee ePolicy Orchestrator Framework Services HTTP Buffer Overflow (CVE-2008-1855)

McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee ePolicy Orchestrator is a central security management system to manage security policy, assess and enforce policy, notify...

Sql injection

SQL injection vulnerability in the Diocese of Portsmouth Calendar pdcalendar extension 0.4.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2008-6691...

Oracle BEA WebLogic Server Apache Connector Buffer Overflow (CVE-2008-4008)

Oracle BEA WebLogic Server is an enterprise-class multi-tier Java Application Server platform. WebLogic is typically used as the platform for large enterprise web applications. It supports various databases including Oracle, DB2, Microsoft SQL Server, MySQL and other JDBC-compliant databases. The...

Oracle Database Trigger MDSYS.SDO_TOPO_DROP_FTBL SQL Injection (CVE-2008-3979)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects such as procedures, functions, triggers, variables, constants, cursors, and exceptions, are provided in order t...

CVE-2008-7248

Affected software / component: Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 in which CSRF protection relies on token verification. Vulnerability / root cause: Rails CSRF protection can be bypassed because tokens are not verified for requests with certain content types (demonstrated with ...

D-Tendencia Bt 2008 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== D-Tendencia Bt 2008 SQL Injection Vulnerability =============================================== / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 +...

D-Tendencia Bt 2008 - SQL Injection

ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! D-Tendencia Bt 2008 SQL Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 + Download : http://www.autoabc.hu/ sel...

D-Tendencia Bt 2008 - SQL Injection

D-Tendencia Bt 2008 - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! D-Tendencia Bt 2008 SQL Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 +...