CVE-2012-2329

Buffer overflow in the apacherequestheaders function in sapi/cgi/cgimain.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service application crash via a long string in the header of an HTTP request...

CVE-2012-2329

CVE-2012-2329 affects PHP 5.4.x prior to 5.4.3, where a buffer overflow in the apache_request_headers function (sapi/cgi/cgi_main.c) can be triggered by a long HTTP header string, enabling remote denial of service (application crash). The issue is fixed in PHP 5.4.3 (ChangeLog-5.php#5.4.3).

PHP 5.4.x < 5.4.1 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is 5.4.x earlier than 5.4.1, and, therefore, potentially affected by multiple vulnerabilities : - The '$FILES' variable can be corrupted because the names of uploaded files are not properly validated. CVE-2012-1172 - The...

mount.cifs - chdir() Arbitrary Root File Identification

mount.cifs - chdir Arbitrary Root File Identification Blueliv Advisory 2012-004 - Discovered by: Jesus Olmos Gonzalez at Blueliv - Risk: 5/5 - Impact: 1/5 1. VULNERABILITY ------------------------- linux privileged and arbitrary chdir, this leads to an arbitary file identification as root. 2...

Hishop 5.4 & 5.4.1 SQL injection-vulnerability warning-the black bar safety net

Exploit Title: Hishop 5.4 &5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor orSoftware Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on: Windows 7 P0c : ? Php printr ' +...

Hishop 5.4 & 5.4.1 SQL injection vulnnerability

Exploit for php platform in category web applications Exploit Title: Hishop 5.4 & 5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor or Software Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on:...

Fedora Update for systemtap FEDORA-2012-2213

Check for the Version of systemtap OpenVAS Vulnerability Test Fedora Update for systemtap FEDORA-2012-2213 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for systemtap FEDORA-2012-2213

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PHP 5.4 Buffer Overflow

From: cataphract Operating system: Any PHP version: 5.4SVN-2012-02-03 SVN Package: Reproducible crash Bug Type: Bug Bug description:Buffer overflow on htmlspecialchars/entities with $double=false Description: ------------ Long entities can cause a buffer overflow because the loop only guarantees ...

Fedora 16 : phpMyAdmin-3.4.9-1.fc16 (2011-17369)

Changes 3.4.9.0 2011-12-21 : - edit Inline editing enum fields with null shows no dropdown - interface DB suggestion not correct for user with underscore - core Magic quotes removed in PHP 5.4 - session No feedback when result is empty signon authtype - display Problems regarding ShowTooltipAlias...

Fedora 16 : phpMyAdmin-3.4.8-1.fc16 (2011-16768)

Changes for 3.4.8.0 2011-12-01 : - interface enum data split at space char more space to edit - interface ENUM/SET editor can't handle commas in values - interface no links to browse/empty views and tables - interface Deleted search results remain visible - import ODS import ignores memory limits...

Libc - 'regcomp()' Stack Exhaustion Denial of Service

? / PHP 5.4 5.3 memorylimit bypass exploit poc by Maksymilian Arciemowicz http://cxsecurity.com/ cxib a.T cxsecurity d0t com To show memorylimit in PHP php /www/memlimpoc.php 1 35000000 PHP Fatal error: Allowed memory size of 33554432 bytes exhausted tried to allocate 35000001 bytes in...

CVE-2010-5008

SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...

Sql injection

SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...

CVE-2010-5008

SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...

CVE-2010-5008

CVE-2010-5008 describes a SQL injection affecting BrightSuite Groupware 5.4, exploitable via the ContactID parameter in pages/contact_list_mail_form.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and availabil...

CVE-2011-3721

Concrete CMS versions 5.4.0.5, 5.4.1, and 5.4.1.1 are affected by an information-disclosure vulnerability. A remote attacker can obtain the installation path by directly requesting certain PHP files (e.g., tools/spellchecker_service.php), which leak paths in error messages. The issue is described...

CentOS Update for kernel CESA-2009:1243 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1243 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability

This host is installed with SecurStar DriveCrypt and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbdrivecryptioctlprivescvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability Authors:...

SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability

SecurStar DriveCrypt is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...