9439 matches found
Fedora Core 11 FEDORA-2009-8800 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. OpenVAS Vulnerability Test $Id: fcore20098800.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8800 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2008-7056
BandSite CMS 1.1.4 is affected by CVE-2008-7056 due to missing access control on adminpanel/phpmydump.php, enabling remote attackers to directly request the file and obtain copies of the database. This is documented across NVD/NVD-CVE records and related CVE aggregations. The available descriptio...
Fedora 11 : qt-4.5.2-2.fc11 (2009-8800)
Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...
Fedora 10 : qt-4.5.2-2.fc10 (2009-8802)
Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File !/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
No description provided by source. !/usr/bin/env python SPIP - Content Management System 2.0.9 exploit http://www.securityfocus.com/bid/36008 Author : KernelPanik import urllib, urllib2 import cookielib import sys def sendrequesturlOpener, url, postdata=None: request = urllib2.Requesturl url =...
COMRaider Insecure Method
!/usr/bin/perl COMRaider Idefense Labs CreateFolder and Copy Insecure Method Hard Disk Filler Exploit Discovered and Exploited by : Khashayar Fereidani Http://IRCRASH.com & Http://Fereidani.ir Help : perl comraider.pl Please enter the foldername C:\ircrash\ for example : C:\ircrash\ Please ente...
Soritong MP3 Player 1.0 - SKIN Local Stack Overflow (PoC) (SEH)
Soritong MP3 Player 1.0 - SKIN Local Stack Overflow PoC SEH Soritong MP3 Player 1.0 SKIN Local Stack Overflow PoC Seh First:http://milw0rm.com/exploits/8624 By: ThE g0bL!N my $crash="\x41" x 5000 ; just random openmyfile,'UI.txt' ; print myfile $crash; Usage: After Clicking On file Perl Copy TXT...
IIS write permissions vulnerability principle&use of tools Manual Version-bug warning-the black bar safety net
Very old stuff, strictly speaking, not a vulnerability, just set up poorly causing the Bug. Eight hundred years of encounter less than a, the result a few days ago the misfortune to run into. With JSKY scan People's station, the results of the scanner actually directly to the people of the whole...
Mandrake Security Advisory MDVSA-2009:126 (eggdrop)
The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126. OpenVAS Vulnerability Test $Id: mdksa2009126.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:126 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora 10 : eggdrop-1.6.19-4.fc10 (2009-5572)
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2009-1789
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2009-1789
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
Design/Logic Flaw
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2009-1789
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2009-1789
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2008-6704
The CVE-2008-6704 entry concerns an integer overflow in the NET_Compressor::Decompress function of S.T.A.L.K.E.R.: Shadow of Chernobyl (versions 1.0006 and earlier). A remote attacker can trigger a denial of service (server crash) by sending a crafted packet with a 0xC1 value that contains no com...
Mandriva Update for libwmf MDKSA-2007:123 (libwmf)
Check for the Version of libwmf OpenVAS Vulnerability Test Mandriva Update for libwmf MDKSA-2007:123 libwmf Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
CVE-2008-6592
thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" aka flat and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cachedir parameter containing a %00 encoded null by...