GNU libnss_db 2.2.3 库本地信息泄露漏洞

BUGTRAQ ID: 39132 CVE ID: CVE-2010-0826 nssdb软件包提供了一套C库扩展，允许将Berkeley DB数据库用作别名、组、主机、网络、协议、用户、RPC、服务和影子口令的主来源。 nssdb库在遇到解析错误时可能会显示DBCONFIG文件的某些内容，本地用户可以通过将DBCONFIG符号链接到受限制的文件上然后执行使用该库的suid root应用程序来读取敏感信息。 GNU libnssdb 2.2.3 厂商补丁： GNU --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

60cycle CMS 2.5.2 Cross Site Request Forgery

======================================================================================== | Title : 60 cycleCMS V 2.5.2 CSRF Change Username & Password Exploit | Author : EL-KAHINA | Home : www.iqs3cur1ty.com/vb | Web Site : http://php.opensourcecms.com/scripts/details.php?scriptid=337 | Tested on...

Joomla! Component JoltCard 1.2.1 - SQL Injection

Joomla! Component JoltCard 1.2.1 - SQL Injection Exploit Title: Joomla Component comjoltcard SQL Injection Vulnerability Date: 17.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

RedHat Update for nss_db RHSA-2010:0347-01

Check for the Version of nssdb OpenVAS Vulnerability Test RedHat Update for nssdb RHSA-2010:0347-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Design/Logic Flaw

Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appended long string containing an unspecified manipulation...

CVE-2010-1329

CVE-2010-1329 affects Imperva SecureSphere Web Application Firewall and Database Firewall, with vulnerable versions ranging from 5.0.0.5082 to 7.0.0.7078. The issue allows remote attackers to bypass intrusion-prevention functionality by sending a request that includes an appended long string cont...

Magneto Net Resource ActiveX v4.0.0.5 NetConnectionEnum Exploit

Exploit for windows platform in category remote exploits =========================================================================== Magneto Net Resource ActiveX v4.0.0.5 NetConnectionEnum Exploit Universal =========================================================================== 'Magneto...

School Management System Pro 6.0.0 Backup Disclosure

======================================================================================== | Title : School Management System Pro 6.0.0 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Web Site :...

Oracle Closes 47 Holes in DB, Solaris, Java Patch

Oracle has dealt a sweeping blow to vulnerabilities in its quarterly Critical Patch Update CPU. The vendor closes a total of 47 holes in many of its products, among them the database, the business suites, Sun Solaris and the Java System Directory Server. Read the full article. The H Security...

School Management System Pro 6.0.0 - Backup Dump

School Management System Pro 6.0.0 - Backup Dump ======================================================================================== | Title : School Management System Pro 6.0.0 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | We...

Mihalism Multi Host 4.0.0 - Arbitrary File Upload

Mihalism Multi Host 4.0.0 - Arbitrary File Upload ======================================================================================== | Title : Mihalism Multi Host V 4.0.0 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

Book Library v1.4.162 Local Dos .bkd File

Exploit for windows platform in category dos / poc ========================================= Book Library v1.4.162 Local Dos .bkd File ========================================= Exploit Title: Book Library Local Dos .bkd file Date: April 14, 2010 Software Link: http://wensoftware.com/ Version:...

MovieLibrary v1.4.401 Local Dos .dmv File

Exploit for windows platform in category dos / poc ========================================= MovieLibrary v1.4.401 Local Dos .dmv File ========================================= Exploit Title: MovieLibrary Local Dos .dmv file Date: April 14, 2010 Software Link: http://wensoftware.com/ Version:...

Mp3 Online Id Tag Editor - Remote File Inclusion

Mp3 Online Id Tag Editor - Remote File Inclusion ======================================================================================== | Title : Mp3 Online Id Tag Editor RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site :...

Mp3 Online Id Tag Editor - Remote File Inclusion

======================================================================================== | Title : Mp3 Online Id Tag Editor RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site : http://www.p30vel.ir/ | Script : Powered by OMS4ALL v1.10 -...

Multi-Mirror - Arbitrary File Upload

======================================================================================== | Title : Multi-Mirror Remote Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://www.p30vel.ir/ | Tested on: windows SP2 Français V.Pnx2...

Design/Logic Flaw

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-0851

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-0852

CVE-2010-0852 affects Oracle Database XML DB component across versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. The connected NVD entry provides a CVS...

CVE-2010-0852

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...