HP-UX Security Patch : PHSS_24836

VirtualVault 4.0 TGA libvvtga fix %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26610; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11"...

DSA-1378-2 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

DSA-1378-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1377-1] New fetchmail packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1377 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1372-1] New xorg-server packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1372-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 9th, 2007 http://www.debian.org/security/faq -...

Debian DSA-1363-1 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2172 Thomas Graf reported a typo in the IPv4...

Debian DSA-1361-1 : postfix-policyd - buffer overflow

It was discovered that postfix-policyd, an anti-spam plugin for postfix, didn't correctly test lengths of incoming SMTP commands potentially allowing the remote execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

DSA-1363-1 linux-2.6

Bulletin has no description...

Debian DSA-1357-1 : koffice - integer overflow

It was discovered that an integer overflow in the xpdf PDF viewer may lead to the execution of arbitrary code if a malformed PDF file is opened. koffice includes a copy of the xpdf code and required an update as well. The oldstable distribution sarge will be fixed later. %NASLMINLEVEL 70300 C...

SunShop 4.0 RC 6 (search) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo------------------"; print "\n | SunShop v4.0 RC 6 search Blind SQL Injection |"; print "\n | k1tk4t - Indonesia -...

Debian DSA-1356-1 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1353 Ilja van Sprundel discovered that kernel...

joekoe CMS 4.0 two vulnerabilities-vulnerability warning-the black bar safety net

Today is Ah bad sent me the software.. But just look at the software boring. in. So by looking for this vulnerability. in. Looked under beef cattle analysis of.. Read the inside meaning So by the way is also made up To put this belated vulnerability for everyone to see...

[SECURITY] [DSA 1345-1] New xulrunner packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1345-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 4th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1342-1] New xfs packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1342-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 30th, 2007 http://www.debian.org/security/faq -...

joekoe CMS 4.0 上传漏洞

Joekoe CMS 4.0 给您带来一个经过完善的设计，在会员互动及安全方面有独特创新性的系统，适用于Windows NT服务环境下的的Web站点或商务平台的最佳解决方案。它精心设计的架构与功能机制，从个人到企业各方面应用的要求，为你提供一个安全、稳定、高效而快捷的Web站点和一体化的商务平台解决方案。 看\common\include\web.upload.asp 中的代码 sub doPageLoad if APPSTATUS="close" then treeData.addItem "status","error.message" treeData.addItem...

joekoe CMS 4.0 注入漏洞

Joekoe CMS 4.0 给您带来一个经过完善的设计，在会员互动及安全方面有独特创新性的系统，适用于Windows NT服务环境下的的Web站点或商务平台的最佳解决方案。它精心设计的架构与功能机制，从个人到企业各方面应用的要求，为你提供一个安全、稳定、高效而快捷的Web站点和一体化的商务平台解决方案。 在web.upload.asp中： ........... sub doParseUploadData dim tmpFilePath,tmpFileType,tmpFileSize,tmpName tmpFilePath=up.getFileInfo"file.path"...

CVE-2007-3789

SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3789

The CVE-2007-3789 issue affects Inmostore 4.0, specifically the admin/index.php entry point. The vulnerability is a SQL injection in the Password field that permits remote attackers to execute arbitrary SQL commands. The available documents confirm the affected component (admin/index.php) and the...

CVE-2007-3789

SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Inmostore 4.0 - index.php SQL Injection

Inmostore 4.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/24884/info Inmostore is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...