Cisco IOS XR Software Route Processor Denial of Service Vulnerability

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the "Affected Products" section of this advisory. The vulnerability is due to improper...

qemu disk backend (qdisk) resource leak

ISSUE DESCRIPTION The qdisk PV disk backend in the qemu-xen flavour of qemu "upstream qemu" can be influenced by a malicious frontend to leak mapped grant references. IMPACT A malicious HVM guest can cause the backend domain to run out of grant references, leading to a DoS for any other domain...

iCart Pro version 4.0.1 SQL Injection Vulnerability

iCart Pro version 4.0.1 appears to suffer from a remote SQL injection vulnerability. Exploit Title: vbcovor ICART SQLI Date: 25/01/2013 Authors: n3tw0rk Contact: Mail:email protected Product: iCart Pro Software Version 4.0.1 Product Download: http://www.vbcover.com/icart.php?do=product&productid=...

iCart Pro 4.0.1 SQL Injection

Exploit Title: vbcovor ICART SQLI Date: 25/01/2013 Authors: n3tw0rk Contact: Mail:[email protected] Product: iCart Pro Software Version 4.0.1 Product Download: http://www.vbcover.com/icart.php?do=product&productid=61 Google Dork: inurlicart.php Require Editting product access for SQL error...

Fedora 18 : xen-4.2.0-6.fc18 (2012-19652)

A guest can cause xen to crash XSA-26, CVE-2012-5510 883082 An HVM guest can cause xen to run slowly or crash XSA-27, CVE-2012-5511 883084 A PV guest can cause xen to crash and might be able escalate privileges XSA-29, CVE-2012-5513 883088 An HVM guest can cause xen to hang XSA-30, CVE-2012-5514...

vBulletin 4.2.0 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is vBulletin 4.2.0, in forumrunner. With Full Path Disclosure you can get the path to the forum you're in and also most of the times is the same cpanel's username. To see it go to:...

vBulletin 3.x <= 4.2.0 FAQ (Echo config) trick

By using this codes, you can echo config.php information, such as host, username and password. Go to acp, Faq Manager and then edit a FAQ, add the following code: $vbulletin-config'MasterServer''servername' $vbulletin-config'MasterServer''username' $vbulletin-config'MasterServer''password'...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...

CVE-2011-3206

Multiple cross-site scripting XSS vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network aka JON or JBoss ON before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network aka JON or JBoss ON before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3206

The CVE-2011-3206 entry describes multiple XSS vulnerabilities in the RHQ/JBoss ON administration interface (RHQ 4.2.0, used in JBoss Operations Network before 3.0). The root cause is lack of input validation in the administration UI, allowing remote attackers to inject arbitrary script/HTML via ...

Information disclosure

Textpattern 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/txplibdb.php and certain other files...

Fedora 14 : dhcp-4.2.0-23.P2.fc14 (2011-10705)

This update fixes a pair of defects that could cause the server to halt upon processing certain packets. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

rgboard &lt;=4.2.0 任意文件下载漏洞

rgboard是韩国的一款php论坛 这是一个标准的逻辑漏洞 spamimg.php代码如下 $schkcode = $SESSION"schk".$chkcode; ifpregmatch'/^0-9/',$schkcode$ord // ???? $file='imagesspam/'.$schkcode$ord.".gif"; else ifpregmatch'/^a-z/',$schkcode$ord // ?????? $file='imagesspam/'.$schkcode$ord."1.gif"; else ifpregmatch'/^A-Z/',$schkcode$or...

TextPattern 4.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47182/info TextPattern is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Textpattern 4.2.0 Cross Site Scripting

´´´´´´´´´´´´´´´´´´´´´¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´´´´¶¶¶¶¶¶´´´´´´´´´´´´´¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´ ´´´´´´´´´´´´´¶¶¶´´´´´´´´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´´´´ ´´´´´´´´´´´´¶¶´´´´´´´´´ ´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´...

Fedora 14 : dhcp-4.2.0-19.P2.fc14 (2011-0862)

A flaw was discovered in the way the dhcpd daemon processed a message for an address that had been previously declined and internally tagged as abandoned. Processing such a message could trigger an assert failure that could crash dhcpd if it was running as a DHCPv6 server. DHCPv4 servers are...

Directory traversal

Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the CHGDYNPGSETLANGUAGE parameter to index.php. NOTE: some of these details are obtained from third party...

Jcow 4.2.0 Blind SQL/XPath injection Vulnerability

Exploit for php platform in category web applications ================================================== Jcow 4.2.0 Blind SQL/XPath injection Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Textpattern CMS 'index.php' Remote File Inclusion Vulnerability

Textpattern CMS is prone to a remote file inclusion vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...