TagScanner 5.1 Buffer Overflow

Title: ====== TagScanner v5.1 - Stack Buffer Overflow Vulnerability Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=831 VL-ID: ===== 831 Common Vulnerability Scoring System: ==================================== 6.4 Introduction: =============...

HP Intelligent Management Center - topoContent.jsf Cross-Site Scripting

HP Intelligent Management Center - topoContent.jsf Cross-Site Scripting source: https://www.securityfocus.com/bid/58293/info HP Intelligent Management Center is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Microsoft Wuindows Movie Maker 5.1 (wav/mpeg) Memory Corruption

Exploit for windows platform in category dos / poc Title : Microsoft Wuindows Movie Maker 5.1 Memory Corruption Date: 2013-01-12 Software Link: http://windows.microsoft.com/fr-CH/windows-live/movie-maker-get-started phone : +447024073406 Author: The Black Devils Tested on: Windows XP SP2 Home:...

PHP Weby Directory Software 1.2 SQL Injection / CSRF Vulnerabilities

PHP Weby Directory Software version 1.2 suffers from cross site request forgery and remote blind SQL injection vulnerabilities. =========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download:...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : mysql-5.1, mysql-5.5, mysql-dfsg-5.1 vulnerabilities (USN-1703-1)

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.1.67 in Ubuntu 10.04 LTS and Ubuntu 11.10. Ubuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.29. In addition to security fixes, th...

USN-1703-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.1.67 in Ubuntu 10.04 LTS and Ubuntu 11.10. Ubuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.29. In addition to security fixes, th...

WHMCS 5.0 - Insecure Cookie Authentication Bypass

WHMCS 5.0 - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/57145/info WHMCS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability ...

CVE-2012-0882

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...

CVE-2012-0882

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...

PT-2012-2926 · Oracle · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL versions 5.5.20 through 5.5.21 MySQL versions 5.1.x through 5.1.61 Description: A buffer overflow issue in yaSSL, used by MySQL, allows remote attackers to execute arbitrary code. The issue is related to unspecified vectors. There is no...

TWiki 5.1.2 Command Execution

This security advisory alerts you of a potential security issue with TWiki installations: The %MAKETEXT% TWiki variable allows arbitrary shell command execution. The problem is caused by an underlying security issue in the Locale::Maketext CPAN module. Vulnerable Software Version Attack Vectors...

Ubuntu: Security Advisory (USN-1658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mc FEDORA-2012-19349

Check for the Version of mc OpenVAS Vulnerability Test Fedora Update for mc FEDORA-2012-19349 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

Debian DSA-2581-1 : mysql-5.1 - several vulnerabilities

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to a new upstream version, 5.1.66, which includes additional changes, such as performance improvements and corrections for data loss defects. These changes are described in the...

MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot)

Exploit for windows platform in category remote exploits...

Empire CMS backstage password reset vulnerability-vulnerability warning-the black bar safety net

5.0 and previous versions: use phpmyadmin to modify the phomeenewsuser table, the password field is set to the value: e10adc3949ba59abbe56e057f20f883e The password is: 1 2 3 4 5 6 Version 5.1: use phpmyadmin to modify the phomeenewsuser table of the record: the password field value is set...

Monitoring vSphere 5.1 and 5.5 with Veeam MP/SPI 5.7

Challenge If you connect to vCenter Server 5.1 or 5.5, Veeam MP/SPI 5.7 will not collect some data, including hardware sensor metrics and vCenter-specific events and properties that were introduced by VMware since VMware vSphere 4.0. vCenter events and properties that were introduced before VMwar...

Debian Security Advisory DSA 2566-1 (exim4)

The remote host is missing an update to exim4 announced via advisory DSA 2566-1. OpenVAS Vulnerability Test $Id: deb25661.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2566-1 exim4 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Microsoft Paint 5.1 - '.bmp' Denial of Service

source: https://www.securityfocus.com/bid/56311/info Microsoft Paint is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application. Due to the nature of the issue code execution might be possible, but it has not been confirmed. Microsoft...

Microsoft Paint 5.1 Memory Corruption

notice : for testing POC please run the Microsoft Pain under a debugger and then open the POC file. Memory corruption during the handling of the bmp files a context-dependent attacker can execute arbitrary code. !/usr/bin/perl Title : Microsoft Paint 5.1 memory corruption Version : build 2600.xps...