84 matches found
Ubuntu 14.04 LTS : PostgreSQL vulnerabilities (USN-2772-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2772-1 advisory. Josh Kupershmidt discovered the pgCrypto extension could expose several bytes of server memory if the crypt function was provided a too-short salt. An...
FreeBSD : PostgreSQL -- minor security problems. (a0182578-6e00-11e5-a90c-0026551a22dc)
PostgreSQL project reports : Two security issues have been fixed in this release which affect users of specific PostgreSQL features. - CVE-2015-5289 json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. - CVE-2015-5288: The...
CVE-2011-5289
The CVE-2011-5289 entry concerns the SaveDecrypted method of the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll used by aTube Catcher 2.3.570. The vulnerability allows remote attackers to write to arbitrary files by supplying a pathname in the argument to SaveDecrypted. Docume...
Kolibri Webserver 2.0 Buffer Overflow with EMET 5.0 and EMET 4.1 Partial Bypass
No description provided by source. !/bin/python import socket, sys, re Exploit Title: Kolibri POST Buffer overflow with EMET 5.0 and EMET 4.1 Partial Bypass Date: September 30th 2014 Author: tekwizz123 Vendor Homepage: http://www.senkas.com Software Download:...
Kolibri WebServer HTTP POST Request Handling Remote Stack Buffer Overflow
Added: 10/10/2014 CVE: CVE-2014-5289 BID: 69263 OSVDB: 110142 Background SENKAS Kolibri Webserver is a free very simple web server for Microsoft Windows that supports serving static web content. Problem Kolibri Webserver is vulnerable to a stack buffer overflow as a result of failure to properly...
Kolibri WebServer HTTP POST Request Handling Remote Stack Buffer Overflow
Added: 10/10/2014 CVE: CVE-2014-5289 BID: 69263 OSVDB: 110142 Background SENKAS Kolibri Webserver is a free very simple web server for Microsoft Windows that supports serving static web content. Problem Kolibri Webserver is vulnerable to a stack buffer overflow as a result of failure to properly...
Kolibri Webserver 2.0 Buffer Overflow
!/bin/python import socket, sys, re Exploit Title: Kolibri POST Buffer overflow with EMET 5.0 and EMET 4.1 Partial Bypass Date: September 30th 2014 Author: tekwizz123 Vendor Homepage: http://www.senkas.com Software Download: http://www.senkas.com/kolibri/download.php Version: 2.0 Tested on: Windo...
CVE-2014-5289
creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34856 2024-03-18 08:41:55+00:00| seen| https://t.me/ctinow/210267...
Kolibri WebServer 2.0 - Remote Buffer Overflow (EMET 5.0 / EMET 4.1 Partial Bypass)
!/bin/python import socket, sys, re Exploit Title: Kolibri POST Buffer overflow with EMET 5.0 and EMET 4.1 Partial Bypass Date: September 30th 2014 Author: tekwizz123 Vendor Homepage: http://www.senkas.com Software Download: http://www.senkas.com/kolibri/download.php Version: 2.0 Tested on: Windo...
openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)
A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...
SuSE 11.2 / 11.3 Security Update : Mozilla NSS (SAT Patch Numbers 8484 / 8485)
"Mozilla NSS has been updated to 3.15.2 bnc847708 bringing various features and bugfixes : The main feature is TLS 1.2 support and its dependent algorithms. - Support for AES-GCM ciphersuites that use the SHA-256 PRF - MD2, MD4, and MD5 signatures are no longer accepted for OCSP or CRLs - Add...
SuSE 11.2 Security Update : Mozilla NSS (SAT Patch Number 8484)
"Mozilla NSS has been updated to 3.15.2 bnc847708 bringing various features and bugfixes : The main feature is TLS 1.2 support and its dependent algorithms. - Support for AES-GCM ciphersuites that use the SHA-256 PRF - MD2, MD4, and MD5 signatures are no longer accepted for OCSP or CRLs - Add...
CVE-2010-5289
Buffer overflow in the Authenticate method of the INCREDISPOOLERLib.Pop ActiveX control (ImSpoolU.dll) in IncrediMail 2.0 is the issue. The vulnerability arises from a long string in the first argument, triggering a crash (DoS) and potentially unspecified impact. Affected component: ImSpoolU.dll,...
CVE-2012-5289
CVE-2012-5289 affects Plogger 1.0 RC1 with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the id parameter to index.php or gallery.php. The connected sources (NVD, CVE lists, PRION, etc.) confirm the vulnerability description; no explicit ...
CVE-2010-5289
creationtimestamp| type| source ---|---|--- 2010-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12030...
CVE-2007-5289
HP Quality Center (QC) 9.2 and earlier, and possibly TestDirector, caches client-side scripts for workflow logic. An attacker can modify (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds, or (6) testplan.tds in %tmp%\TD_80, then set the file properties to read-only to ...
CVE-2008-5289
SQL injection vulnerability in fulltxt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5289
CVE-2008-5289 describes a SQL injection vulnerability in the Clean CMS 1.5 product, specific to the full_txt.php endpoint. The vulnerability arises from unsafely handling the id parameter, allowing remote attackers to inject and execute arbitrary SQL commands. Documented sources (NVD, CVE listing...
CVE-2008-5289
creationtimestamp| type| source ---|---|--- 2008-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7228 2008-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7230...