2847 matches found
MySQL 6.0 < 6.0.6 Empty Bit-String Literal Token SQL Statement DoS
The version of MySQL 6.0 installed on the remote host is earlier than 6.0.6. A bug in such versions can lead to a server crash in 'Itembinstring::Itembinstring' when handling an empty bit-string literal b''. Using a simple SELECT statement, an authenticated remote user can leverage this issue to...
Micrsoft Windows GDI (CreateDIBPatternBrushPt) Heap Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================ Micrsoft Windows GDI CreateDIBPatternBrushPt Heap Overflow PoC ================================================================ CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop...
Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
Microsoft Windows - GDI CreateDIBPatternBrushPt Heap Overflow PoC CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently...
CVE-2008-3704
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers t...
PT-2008-4375 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.37 Apache Tomcat versions 5.5.0 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16 Description: The issue allows remote attackers to read arbitrary files via encoded directory traversal sequenc...
Solaris 9 (sparc) : 138536-01
Service Provisioning System 6.0: N1 SPS Webserver 7 Plug-in Patch. Date this patch was last updated by Sun : Jul/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Solaris 8 (sparc) : 138536-01
Service Provisioning System 6.0: N1 SPS Webserver 7 Plug-in Patch. Date this patch was last updated by Sun : Jul/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
PT-2008-2825 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.37 Apache Tomcat versions 5.5.0 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16 Description: The issue allows remote attackers to inject arbitrary web script or HTML via a crafted string tha...
RedHat 6.0单用户方式认证漏洞
RedHat Linux 6.0在进入单用户方式时做了口令限制，但是这个限制很容易被绕过。在进入单用户 方式时，RedHat 6.0会提示用户输入root密码，这时只要按下^C发送SIGINT信号,就可以得到一 个root shell了。 RedHat Linux 6.0 更新到RedHat 6.1...
vc6. 0 stack overflow-vulnerability warning-the black bar safety net
from:Phantom maillist Hold for six months. The problem is that the include file name length is not detected. For example include "AAAA.... AA"-A It will be hung. =2008-2-17 found vulnerabilities. 2008-3-3 report to MS, same day received a reply, saying that under study. 2008-3-4 MS confirmed this...
CVE-2008-2753
CVE-2008-2753 affects Pooya Site Builder (PSB) 6.0, with multiple SQL injection vulnerabilities described via (1) xslIdn to utils/getXsl.aspx and (2) part to getXml.aspx and getXls.aspx in utils/. The issue enables remote attackers to execute arbitrary SQL commands (injection via unvalidated inpu...
Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder property of CTSUEng.ocx an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
Pooya Site Builder (PSB) 6.0 - Multiple SQL Injections
www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/42 1. Description: Pooya site builder psb i...
Sql injection
Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp and 2 cat parameter to templatearchivescat.asp...
CVE-2008-2554
Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp and 2 cat parameter to templatearchivescat.asp...
CVE-2008-2554
The CVE-2008-2554 entry describes SQL injection vulnerabilities in BP Blog 6.0. The affected component is BP Blog 6.0, with vulnerable inputs being the id parameter to template_permalink.asp and the cat parameter to template_archives_cat.asp, leading to arbitrary SQL execution. The underlying cau...
MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass
No description provided by source. Orginal Advisory and exploit by cyberflash Vengy Circumvent Windows XP SP2 security features using execCommand 'SaveAs' function! Demonstration: Notice that you don't receive any warning messages such as:...
BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability
BP Blog 6.0 id Remote Blind SQL Injection Vulnerability JosS, Jose Luis Gуngora Fernбndez Spanish Hackers Team www.spanish-hackers.com + Info: Software: bp blog HomePage: http://blog.betaparticle.com/ Exploit: Blind SQL Injection High Vuln file: templatepermalink.asp Vuln file2:...
BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 6.0 Multiple Blind SQL Injection Vulnerability +==-- --==+====================================================================================+==-- + Jos...
BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= BP Blog 6.0 id Remote Blind SQL Injection Vulnerability ========================================================= + Info: Software: bp blog HomePage: http://blog.betaparticle.com/...