Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability

Advisory ID Internal CORE-2009-1103 1. Advisory Information Title: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability Advisory Id: CORE-2009-1103 Date published: 2010-03-09 Date of last update: 2010-03-09 Vendors contacted: Microsoft Release mode: Coordinated release 2...

nus newssystem 1.02 - 'id' SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. NUs Newssystem 1.02 id SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Page: http://www.internet-works.de/home.html + Vulnerabilities SQL Injection + Language: PH...

Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow

Advisory ID Internal CORE-2009-0813 1. Advisory Information Title: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream Heap Overflow Advisory Id: CORE-2009-0813 Advisory URL:http://www.coresecurity.com/content/movie-maker-heap-overflow Date published: 2010-03-09 Date of last update:...

DZ Auktionshaus "V4.rgo" (id) news.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== DZ Auktionshaus "V4.rgo" id news.php SQL Injection Vulnerability ==================================================================...

DZ Auktionshaus 'V4.rgo' - 'id' news.php?SQL Injection

----------------------------Information------------------------------------------------ +Name : DZ Auktionshaus "V4.rgo" id news.php SQL Injection +Autor : Easy Laster +Date : 08.03.2010 +Script : DZ Auktionshaus "V4.rgo" +Price : 99,99€ +Language :PHP +Discovered by Easy Laster +Security Group...

dev4u CMS (Personenseiten) go_target.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== dev4u CMS Personenseiten gotarget.php SQL Injection Vulnerability ====================================================================...

Auktionshaus 3.0.0.1 - 'news.php?id' SQL Injection

----------------------------Information------------------------------------------------ +Name : Auktionshaus 3.0.0.1 news.php id SQL Injection +Autor : Easy Laster +Price : 59.95€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to Team-Internet ,Underground...

Uiga Fan Club - 'index.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Uigafanclub index.php SQL Injection +Autor : Easy Laster +Date : 28.02.2010 +Script : Uigafanclub +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to Team-Interne...

Uiga Personal Portal - index.php SQL Injection

Uiga Personal Portal - index.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Uiga Personal Portal index.php SQL Injection +Autor : Easy Laster +Date : 28.02.2010 +Script : Uiga Personal Portal +Language :PHP +Discovered by Easy...

Uiga Fan Club index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Uiga Fan Club index.php SQL Injection Vulnerability ===================================================...

Uiga Personal Portal index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Uiga Personal Portal index.php SQL Injection Vulnerability ==========================================================...

DZ Erotik Auktionshaus 4.rgo - 'news.php' SQL Injection

----------------------------Information------------------------------------------------ +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to Team-Internet ,Underground Agents +And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok, Kiba,-tmh-,Dr...

DZ Erotik Auktionshaus 4.rgo - news.php SQL Injection

DZ Erotik Auktionshaus 4.rgo - news.php SQL Injection ----------------------------Information------------------------------------------------ +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to Team-Internet ,Underground Agents +And all Friends of Cyberlive :...

Softbiz Classifieds PLUS SQL Injection

----------------------------Information------------------------------------------------ +Name : Softbiz Classifieds PLUS SQL Injection gallery.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Classifieds PLUS +Download : ----- +Demo : www.posbisnis.com /the password is in browser lin...

Softbiz Recipes Portal Script (showcats.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Softbiz Recipes Portal Script showcats.php SQL Injection Vulnerability ========================================================================...

Debian DSA-1830-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0040 The execution of arbitrary code might be possible via a crafted...

Softbiz Auktios Script - Multiple SQL Injections

Softbiz Auktios Script - Multiple SQL Injections ----------------------------Information------------------------------------------------ +Name : softbiz auktios script sql injection viewitems.php +Autor : Easy Laster +Date : 24.02.2010 +Script : softbiz auktios script +Download : ----- +Demo :...

Debian DSA-1832-1 : camlimages - integer overflow

Tielei Wang discovered that CamlImages, an open source image processing library, suffers from several integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-1912-1 : camlimages - integer overflow

It was discovered that CamlImages, an open source image processing library, suffers from several integer overflows, which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. This advisory addresses issues with the reading of TIFF files. It also expands the...

PHP Auktion Pro SQL Injection

----------------------------Information------------------------------------------------ +Name : Php Auktion Pro SQL Injection news.php +Autor : Easy Laster +Date : 22.02.2010 +Script : Php Auktion Pro +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/auktionblau/...