Debian DSA-2236-1 : exim4 - command injection

It was discovered that Exim, Debian's default mail transfer agent, is vulnerable to command injection attacks in its DKIM processing code, leading to arbitrary code execution. CVE-2011-1407 The default configuration supplied by Debian does not expose this vulnerability. The oldstable distribution...

Null pointer dereference

IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 aka 6.3.49, and 6.5.x before 6.5 FP4 aka 6.5.0.4 does not properly handle the 1 rpctestsvcreadwrite and 2 rpctestsvcdone commands, which allows remote attackers to cause a denial of service NULL pointer...

phpstcms (STCMS music system) to bypass the backend authentication method-vulnerability warning-the black bar safety net

Published author: the mind Vulnerability type: background verification Vulnerability analysis: a music system-0-in! Throw in the hard disk is also equal to moldy, classic white look at the code. Vulnerability exists in“common.inc.php”file, as follows. phpstcms STCMS music system to bypass the...

Publishing Technology Blind SQL Injection

========================================================= Publishing technology Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...

Discuz! 6.0 存储型XSS

简要描述： Discuz! 6.0 存储型XSS 详细说明： Discuz! 6.0 【店铺介绍】存在XSS漏洞 不知道如何访问店铺（没找到这功能！？），所以不知道这个XSS是只跨自己还是跨任何访问店铺的人。 因为这个地方的xss（alert（/Liscker/;）跟去年发的那个【个性签名】 的xss一样，所以个人极度认为这个也是只能跨自己的，只能结合其它漏洞一起来用了。 漏洞证明：...

CVE-2010-4788

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service daemon crash via a paged search...

Design/Logic Flaw

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

CVE-2010-4787

The vulnerability CVE-2010-4787 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005). A remote authenticated user can trigger a denial of service (daemon hang) via a paged search that triggers improper mutex processing. The available records confirm the affe...

CVE-2009-5073

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.59 aka 6.0.0.8-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service infinite loop and daemon hang by adding a nested group that contains the Distinguished Name DN of its parent entry...

CVE-2010-4789

The CVE-2010-4789 issue is a use-after-free in the proxy-server component of IBM Tivoli Directory Server (TDS). Affected versions are TDS 6.0 prior to 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 prior to 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001). The vulnerability allows remote authenticated users...

CVE-2010-4785

The vulnerability CVE-2010-4785 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). The do_extendedOp function in ibmslapd on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended opera...

CVE-2009-5073

CVE-2009-5073 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.59 (6.0.0.8-TIV-ITDS-IF0001). A remote authenticated user can trigger a denial-of-service by adding a nested group that includes the DN of its parent entry, causing an infinite loop and daemon hang. Impact is a partial ava...

CVE-2010-4786

CVE-2010-4786 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.63 (6.0.0.8‑TIV‑ITDS‑IF0005). The issue enables a remote authenticated user to cause a denial of service (daemon crash or hang) by performing a paged search, related to an improper ibm-slapdIdleTimeOut configuration. The d...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1230) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a NULL-pointer dereference. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1239) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a use-after-free condition. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Code injection

Unspecified vulnerability in EMC RSA Access Manager Server 5.5.x, 6.0.x, and 6.1.x allows remote attackers to access resources via unknown vectors...

SmarterStats 6.0 Multiple Vulnerabilities

Exploit for asp platform in category web applications Vendor: SmarterTools Application: SmarterStats 6.0 Bugs: Directory Traversal, File Upload, OS Execution, XML Injection, SQL Injection, DoS Patch: The Vendor has released SmarterStats Version 6.2 at URI...

SmarterStats 6.0 - Multiple Vulnerabilities

SmarterStats 6.0 - Multiple Vulnerabilities Hoyt LLC Research | SmarterStats 6.0, OS Command Execution, Directory Traversal, DoS, Coordinated Disclosure Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Vendor: SmarterTools Application: SmarterStats 6.0 Bugs: Directory Traversal, Fi...

BMForum Myna 6.0 SQL injection vulnerability-vulnerability warning-the black bar safety net

BMForum is a used in personal, business areas based on the MySQL database to the new PHP Forum program. BMForum Myna 6.0 existSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: BMForum Myna 6.0 SQL Injection Vulnerability Author: Stephan Sattler Software...

BMForum Myna 6.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Author: Stephan Sattler Software Website: http://www.bmforum.com/ Software Link: http://www.bmforum.com/down/ Required: magic quotes = Off Vulnerability /add-on/jsviewnew.php line 20++: $length = $GET'length'; $forumid = $GET'forumid'; $num =...