DedeCMS v5.6 /plus/advancedsearch.php SQL注入漏洞

DedeCMS是国内一款非常流行的网站内容管理系统，其v5.6版本在/plus/advancedsearch.php文件中只要line 36中的$mid不为0，然后能在line 43中检索出自定义模型，便可继续下面的逻辑，因为line 54 变量$sql未初始化，所以利用dede注册变量的逻辑，可以控制$sql的值，所以$sql会被带入数据裤中查询。 DedeCMS 5.6...

RHEL 5 : redhat-release (EOL Notice) (RHSA-2013:0578)

This is the 5-Month notification for the conclusion of Red Hat Enterprise Linux 5.6 Extended Update Support EUS Add-on offering. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the Extended Update Support Add-On for Red Hat Enterprise Linux 5.6 will conclude on July 31, 201...

ESA-2012-060: EMC Data Protection Advisor Information Disclosure Vulnerability.

ESA-2012-060.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-060: EMC Data Protection Advisor Information Disclosure Vulnerability. EMC Identifier: ESA-2012-060 CVE Identifier: CVE-2012-4616 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected Products: EMC Data...

Command injection

Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...

CVE-2012-4585

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL...

Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability

This host is installed with Citrix Provisioning Services and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbcitrixprovisioningservicessoapserverbofvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability...

Cluster does not appear in nworks Enterprise Manager Web UI due to unsupported naming

Challenge When a name of a cluster contains unsupported characters, the following error can occur in the Enterprise Manager log server.txt file: INFO IMon Error: System.ArgumentException: An item with the same key has already been added. at System.ThrowHelper.ThrowArgumentExceptionExceptionResour...

MySQL Authentication Bypass Password Dump

This module exploits a password bypass vulnerability in MySQL in order to extract the usernames and encrypted password hashes from a MySQL server. These hashes are stored as loot for later cracking. Impacts MySQL versions: - 5.1.x before 5.1.63 - 5.5.x before 5.5.24 - 5.6.x before 5.6.6 And Maria...

Jarida 1.0 SQL Injection

Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 01 ./article.php:28: $query = "SELECT articleid FROM...

Jarida 1.0 - Multiple Vulnerabilities

Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 01 ./article.php:28: $query = "SELECT articleid FROM...

Format string

Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified string fields,...

libmodplug <= 0.8.8.2 .abc Stack-Based Buffer Overflow PoC

Exploit for linux platform in category dos / poc include include include / libmodplug = 0.8.8.2 .abc stack-based buffer overflow poc http://modplug-xmms.sourceforge.net/ by: epiphant this exploits one of many overflows in loadabc.cpp lol vlc media player uses libmodplug greets: defrost, babi,...

libmodplug 0.8.8.2 Buffer Overflow

include include include / libmodplug = 0.8.8.2 .abc stack-based buffer overflow poc http://modplug-xmms.sourceforge.net/ by: epiphant this exploits one of many overflows in loadabc.cpp lol vlc media player uses libmodplug greets: defrost, babi, mingwisher, emel1a, a.v., krs date: 28 april 2011...

Libmodplug 0.8.8.2 - .abc Stack Buffer Overflow (PoC)

Libmodplug 0.8.8.2 - .abc Stack Buffer Overflow PoC include include include / libmodplug = 0.8.8.2 .abc stack-based buffer overflow poc http://modplug-xmms.sourceforge.net/ by: epiphant this exploits one of many overflows in loadabc.cpp lol vlc media player uses libmodplug greets: defrost, babi,...

PT-2011-2540 · Microsoft · Jscript +1

Name of the Vulnerable Software and Affected Versions: Microsoft JScript versions 5.6 through 5.8 Microsoft VBScript versions 5.6 through 5.8 Description: The issue is related to multiple integer overflows in the scripting engines, which allow remote attackers to execute arbitrary code via a...

CVE-2011-0539

The keycertify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct...

CVE-2011-0539

The keycertify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct...

OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability

Checks whether OpenSSH is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability

Checks whether OpenSSH is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to gain access to sensitive information; this may lead to further attacks. Versions 5.6 and 5.7 of OpenSSH are vulnerable. OpenVAS Vulnerability Test $Id: gbopenssh46155.nasl 7019...

comercioplus 5.6 - Multiple Vulnerabilities

Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software Link: http://www.comerciosonline.com/index.php?p=8...