CVE-2013-1544

CVE-2013-1544 affects Oracle MySQL components: 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier. The vulnerability is described as unspecified and related to Data Manipulation Language, with impact limited to availability (partial). Affected software is the MySQL server as used in O...

CVE-2013-1567

Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language, a different vulnerability than CVE-2013-2395...

CVE-2013-1512

Disclaimer: This data contains information about vulnerable...

CVE-2013-1512

Unspecified vulnerability in Oracle MySQL 5.5.29 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language...

CVE-2013-1512

CVE-2013-1512 is an unspecified vulnerability in Oracle MySQL 5.5.29 and earlier that can allow a remote authenticated user to affect availability via unknown DML-related vectors. The connected advisories indicate multiple vendors and open‑source ecosystems map this CVE to affected MySQL/MariaDB ...

CVE-2013-1544

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language...

CVE-2013-1512

Unspecified vulnerability in Oracle MySQL 5.5.29 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language...

Hijacking plane's navigation system with an Android app, Researcher claimed

It is a terrifying prospect, a hack that allows an attacker to take control of plane navigation and cockpit systems has been revealed at a security conference in Europe. This was demonstrated by Hugo Teso, a researcher at security consultancy N.Runs in Germany who's also a commercial airline pilo...

FreeBSD : otrs -- Information disclosure and Data manipulation (eae8e3cf-9dfe-11e2-ac7f-001fd056c417)

The OTRS Project reports : An attacker with a valid agent login could manipulate URLs in the object linking mechanism to see titles of tickets and other objects that are not obliged to be seen. Furthermore, links to objects without permission can be placed and removed. %NASLMINLEVEL 70300 C Tenab...

Wordpress LeagueManager Plugin Multiple Vulnerabilities

This host is installed with Wordpress LeagueManager Plugin and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwordpressleaguemanagerpluginmultvuln.nasl 6125 2017-05-15 09:03:42Z teissa $ Wordpress LeagueManager Plugin Multiple Vulnerabilities Authors: Thanga Prakash S...

On some web vulnerability principle superficial awareness-vulnerability warning-the black bar safety net

Actually always wanted to write such an article but the total there is low end in each God's eyes, perhaps into the not discernment but still decided to write out own of these experience In fact, a lot of sites the existence of vulnerabilities of the reasons there are a variety of, I can only by ...

PT-2013-3194 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.29 and earlier Description: The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to Data Manipulation Language. Recommendations: For Oracle...

WordPress Poll Plugin 'poll_id' Parameter SQL Injection

The WordPress Poll Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'pollid' parameter of the 'wp-admin/admin-ajax.php' script. An unauthenticated, remote attacker can leverage this issue to launch a...

WP Symposium Plugin for WordPress 'symposium_groups_functions.php' 'gid' Parameter SQL Injection

The WordPress WP Symposium Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'gid' parameter of the 'symposiumgroupsfunctions.php' script. An unauthenticated, remote attacker can leverage this issue to...

Svlink SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MySQL (Linux) - Heap Overrun (PoC)

MySQL Linux - Heap Overrun PoC MySQL Heap Overrun tested for the latest version of mysql server on a SuSE Linux system As seen below $edx and $edi are fully controlled, the current instruction is = 0x83a6b24 : mov %edx,%edi this means we landed in a place where 4 bytes can be controlled by 4 byte...

Oracle MySQL Server Multiple Vulnerabilities - 02 - (Nov 2012) - Windows

Oracle MySQL server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...

Oracle MySQL Server Multiple Vulnerabilities - 03 - (Nov 2012) - Windows

Oracle MySQL server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...

Oracle MySQL Server Multiple Vulnerabilities - 01 - (Nov 2012) - Windows

Oracle MySQL server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...

Paypal BBP #2 - Persistent Listing Web Vulnerability

Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...