Sql injection

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to 1 popaccounts.aspx, 2 addressbook.aspx, and 3 emails.aspx...

CVE-2008-6873

CVE-2008-6873 concerns a SQL injection vulnerability in Active Web Mail 4.0 . The flaw allows remote attackers to manipulate the database via the TabOpenQuickTab1 parameter on three pages: popaccounts.aspx, addressbook.aspx, and emails.aspx. The affected component is the web application’s input h...

MultiMedia Jukebox 4.0 Heap Overflow

!/usr/bin/perl Found By :: HACK4LOVE MultiMedia Jukebox 4.0 Build 020124 .pst / .m3u Local Heap Overflow PoC http://www.brothersoft.com/sorcerer-software-multimedia-jukebox-251913.html special thanks for sec-code.com and sniper code my $crash="\x41" x 5000; openmyfile,'hack4love.m3u'; print myfil...

CVE-2009-2482

The pamunix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group...

CVE-2009-2489

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software SRSS 4.0 allows local users to access the sessions of arbitrary users via unknown vectors...

CVE-2009-2483

libprop/propobject.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service NULL pointer dereference and kernel panic via a malformed externalized plist XML form containing an undefined element...

CVE-2009-2483

The CVE-2009-2483 entry affects NetBSD 4.0 and 4.0.1 via libprop/prop_object.c in proplib. A local attacker can trigger a denial of service by supplying a malformed externalized plist (XML form) containing an undefined element, causing a NULL pointer dereference and kernel panic. The connected do...

CVE-2009-2489

Technical details for CVE-2009-2489 are not publicly provided in the connected documents. The references describe an unspecified local-access vulnerability in Sun Ray Server Software 4.0 but do not specify affected versions, exploitation vectors, or fixes. Monitor for updates.

CVE-2009-2482

The pamunix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group...

MultiMedia Jukebox 4.0 Build 020124 - .pst .m3u Heap Overflow (PoC)

MultiMedia Jukebox 4.0 Build 020124 - .pst .m3u Heap Overflow PoC !/usr/bin/perl Found By :: HACK4LOVE MultiMedia Jukebox 4.0 Build 020124 .pst / .m3u Local Heap Overflow PoC http://www.brothersoft.com/sorcerer-software-multimedia-jukebox-251913.html special thanks for sec-code.com and sniper cod...

MultiMedia Jukebox 4.0 Build 020124 - '.pst' / '.m3u' Heap Overflow (PoC)

!/usr/bin/perl Found By :: HACK4LOVE MultiMedia Jukebox 4.0 Build 020124 .pst / .m3u Local Heap Overflow PoC http://www.brothersoft.com/sorcerer-software-multimedia-jukebox-251913.html special thanks for sec-code.com and sniper code my $crash="\x41" x 5000; openmyfile,'hack4love.m3u'; print myfil...

[SECURITY] [DSA 1835-1] New tiff packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1835-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 15, 2009 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1833-1] New dhcp3 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1833-1 [email protected] http://www.debian.org/security/ Florian Weimer July 14, 2009 http://www.debian.org/security/faq -...

Authentication flaw

Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6858

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6858

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6858

CVE-2008-6858 affects Absolute Banner Manager .NET 4.0. The weakness allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a specific value. The official description consistently states this is an authentication bypass leading to admin-level access...

CVE-2008-6863

CVE-2008-6863 : Xigla Software Absolute Form Processor .NET 4.0 contains an authentication bypass. Remote attackers can gain administrative access by setting a specific cookie value. Impact is described as partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH...

Wind noise 4.0 SP7 getshell 0day-vulnerability warning-the black bar safety net

Source: Found by: bloodsword, a bink, reproduced please disregard Affected versions:=4.0 sp7, the previous version didn't go to see, estimation also can day. Use Conditions, opens a file upload function, iis6 environment. Vulnerability Description: Create a directory somewhere, name the filter on...