4618 matches found
Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit
No description provided by source. / Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Pain...
CVE-2007-2815: Undefined Security Weakness
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services IIS Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile...
MySQL安全调用特权提升漏洞
MySQL是一款开放源代码的数据库程序。 MySQL在部分函数过程中不正确恢复访问特权，远程攻击者可以利用漏洞提升权限，进行其他攻击。 目前没有详细漏洞细节提供。 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1...
MySQL Alter表函数信息泄露漏洞
MySQL是一款开放源代码的数据库程序。 MySQL不正确执行针对Alter表函数的访问控制，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1.6...
CVE-2007-2719
CVE-2007-2719 affects HP Systems Insight Manager (SIM) versions 4.2 and 5.0 SP4/SP5. The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Documented impact is complete confidentiality, integrity, and availability compro...
CVE-2007-2692
CVE-2007-2692 affects MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18. The bug in mysql_change_db fails to restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, enabling a remote authenticated user to gain database privileges. Documented fixes are available...
Sql injection
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI...
CVE-2007-2662
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI...
CVE-2007-2662
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI...
CVE-2007-2662
EFesTECH Haber 5.0 is affected by a SQL injection vulnerability that can be triggered via the id parameter on the top-level URI. Affected component is the web application’s input handling (parameter id) that leads to arbitrary SQL command execution. The vulnerability is documented across multiple...
CVE-2006-7196
Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...
Fixed in Apache Tomcat 5.5.18, 5.0.SVN
Moderate: Cross-site scripting CVE-2006-7195 The implicit-objects.jsp in the examples webapp displayed a number of unfiltered header values. This enabled a XSS attack. These values are now filtered. Affects: 5.0.0-5.0.30, 5.5.0-5.5.17...
HP Tru64 5.0.1 - DOP Command Privilege Escalation
HP Tru64 5.0.1 - DOP Command Privilege Escalation source: https://www.securityfocus.com/bid/23881/info HP Tru64 for UNIX is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits wi...
CVE-2007-2435
Affected software: Sun Java Web Start in JDK/JRE 5.0 Update 10 and earlier; and Java Web Start in SDK/JRE 1.4.2_13 and earlier. Root cause: incorrect use of system classes related to JNLP processing. Impact: remote attacker could cause the application to perform unauthorized actions by granting p...
Sun Java Web Start Unauthorized Access (102881)
According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly may allow an untrusted application to elevate its privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-2365
CVE-2007-2365 affects Adobe Photoshop CS2/CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9. It is a buffer overflow in PNG handling that allows an attacker to execute arbitrary code via a crafted PNG file. The vulnerability is user-assisted (requires opening a crafted image), with a CVS...
CVE-2007-2365: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file...
Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow
No description provided by source. /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D...
Discuz 5.0 0day + PM SMS bypass method-vulnerability warning-the black bar safety net
SQL: 0 union select password,2,0 from cdbmembers where uid=1/ uid=1/ 1 Is the ID value Obtain the Administrator's md5 password Into the background The forum management module edit details To modify the wap. php insert eval$POSTtlwbw Connection address Site address+/templates/default/wap.lang.php ...