CVE-2010-1044

CVE-2010-1044 describes a SQL injection vulnerability in the ManageEngine OpUtils 5.0 login path. Specifically, the vulnerable point is the Login.do handling of the isHttpPort parameter, which can be manipulated by an attacker to alter or append SQL commands. The result is remote execution of arb...

风讯(FoosunCMS) 5.0 Error.asp 错误页跨站脚本漏洞

北洋贱队http://bbs.seceye.org首发 FoosunCMS是一款具有强大的功能的基于ASP+ACCESS/MSSQL构架的内容管理软件，国内领先的第一款开源的、集成web2.0元素的、模块化的ＣＭＳ建站系统。 FoosunCMS不正确过滤用户输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 由于不正确处理错误页面，在返回给用户后，可导致恶意脚本代码在目标浏览器上执行，泄漏敏感信息。 风讯FoosunCMS 5.0 用户可联系官方获得最新版本...

Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ======================================================================= Linux Kernel 'fasynchelper' Local Privilege Escalation Vulnerability ======================================================================= Credit: Tavis Ormandy...

Debian DSA-2017-1 : pulseaudio - insecure temporary directory

Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues

---------------------------------------------------------------------- Debian Security Advisory DSA-2012-1 [email protected] http://www.debian.org/security/ dann frazier March 11, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-2012-1 linux-2.6 - several issues

Bulletin has no description...

ARISg5 (version 5.0) cross site scripting vulnerability

Hello, Please see the following report: ARISg5 version 5.0 cross site scripting vulnerability ----------------------------------------------------------------------- Application name: ARISg5 arisglobal Version: 5.0 Class: Input Validation Error Type: Cross Site Scripting XSS Remote: Yes Credit:...

ARISg5 (Version 5.0) Cross Site Scripting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory Feb 24, 2010 ARISg5 Version 5.0 Cross Site Scripting Vulnerability ========================================= ========================================================================================== Application name:...

[ MDVSA-2010:049 ] sudo

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:049 http://www.mandriva.com/security/ Package : sudo Date : February 25, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerabilitiy has been fou...

ARISg 5.0 - wflogin.jsp Cross-Site Scripting

ARISg 5.0 - wflogin.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/38441/info ARISg is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

ARISg5 version 5.0 cross site scripting vulnerability

Exploit for unknown platform in category web applications ===================================================== ARISg5 version 5.0 cross site scripting vulnerability ===================================================== Hello, Please see the following report: ARISg5 version 5.0 cross site scripti...

CVE-2010-0705

Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service system crash or execute arbitrary code to gain privileges via IOCTL requests using...

[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2010-003 Revision: 1.0 Release Date: 2010/02/22 Last Modified: 2010/02/22 Date Reported: 2010/02/01 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4....

[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1999-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1998-1] New kdelibs packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1998-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 17, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1997-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 14, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1997-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 14, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...