RPM Select/Elite 5.0 Buffer Overflow

!/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...

FusionForge 5.0 Multiple Remote File Include Vulnerability

Exploit for php platform in category web applications ========================================================== FusionForge 5.0 Multiple Remote File Include Vulnerability ========================================================== + FusionForge 5.0 Multiple Remote File Include Vulnerability...

FusionForge 5.0 - Multiple Remote File Inclusions

FusionForge 5.0 - Multiple Remote File Inclusions + FusionForge 5.0 Multiple Remote File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...

FusionForge 5.0 - Multiple Remote File Inclusions

FusionForge 5.0 Multiple Remote File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1...

Fedora Update for libnids FEDORA-2010-5545

Check for the Version of libnids OpenVAS Vulnerability Test Fedora Update for libnids FEDORA-2010-5545 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2010-0085

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than...

CVE-2010-0845

CVE-2010-0845 is addressed in Oracle’s March 2010 Java CPU advisory (and related Oracle/OpenJDK advisories). The connected documents indicate CVE-2010-0845 is among OpenJDK/JRE vulnerabilities fixed by the CPU update, which also bundles fixes for other OpenJDK issues and notes that affected Java ...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CyberCMS - SQL Injection

Exploit Title: CyberCMS Remote SQL Injection Vuln. Date: 26/11/2009 Author: hc0de | hc0de.blogspot.com Software Link: http://cyberfusion.ramx.org/cyber-cms Version: app version Tested on: Ubuntu Linux 9.04 CVE : PoC: +Target: http://server/faq.php?id=SQLCODE -MySQL Version: 5.0.37-community-nt...

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2009-4736

The CVE-2009-4736 entry describes a Cross-site scripting (XSS) vulnerability in CommonSense CMS 5.0 . The issue is triggered in the search.php script via the q parameter, allowing remote attackers to inject arbitrary web script or HTML. The description does not specify affected versions beyond 5....

CVE-2010-1044

CVE-2010-1044 describes a SQL injection vulnerability in the ManageEngine OpUtils 5.0 login path. Specifically, the vulnerable point is the Login.do handling of the isHttpPort parameter, which can be manipulated by an attacker to alter or append SQL commands. The result is remote execution of arb...

风讯(FoosunCMS) 5.0 Error.asp 错误页跨站脚本漏洞

北洋贱队http://bbs.seceye.org首发 FoosunCMS是一款具有强大的功能的基于ASP+ACCESS/MSSQL构架的内容管理软件，国内领先的第一款开源的、集成web2.0元素的、模块化的ＣＭＳ建站系统。 FoosunCMS不正确过滤用户输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 由于不正确处理错误页面，在返回给用户后，可导致恶意脚本代码在目标浏览器上执行，泄漏敏感信息。 风讯FoosunCMS 5.0 用户可联系官方获得最新版本...

Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ======================================================================= Linux Kernel 'fasynchelper' Local Privilege Escalation Vulnerability ======================================================================= Credit: Tavis Ormandy...

Debian DSA-2017-1 : pulseaudio - insecure temporary directory

Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues

---------------------------------------------------------------------- Debian Security Advisory DSA-2012-1 [email protected] http://www.debian.org/security/ dann frazier March 11, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-2012-1 linux-2.6 - several issues

Bulletin has no description...

ARISg5 (version 5.0) cross site scripting vulnerability

Hello, Please see the following report: ARISg5 version 5.0 cross site scripting vulnerability ----------------------------------------------------------------------- Application name: ARISg5 arisglobal Version: 5.0 Class: Input Validation Error Type: Cross Site Scripting XSS Remote: Yes Credit:...

ARISg5 (Version 5.0) Cross Site Scripting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory Feb 24, 2010 ARISg5 Version 5.0 Cross Site Scripting Vulnerability ========================================= ========================================================================================== Application name:...

[ MDVSA-2010:049 ] sudo

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:049 http://www.mandriva.com/security/ Package : sudo Date : February 25, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerabilitiy has been fou...