Netscape 'select()' Object Denial Of Service Vulnerability - Linux

Netscape browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIND Dynamic Update DoS

BIND Dynamic Update DoS CVE: CVE-2009-0696 CERT: VU725188 Posting date: 2009-07-28 Program Impacted: BIND Versions affected: BIND 9 all versions Severity: High Exploitable: remotely Summary: BIND denial of service server crash caused by receipt of a specific remote dynamic update message...

LinksCaffePRO 4.5 SQL Injection / XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

PHP Scripts Now Hangman - 'index.php?n' SQL Injection

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

openSUSE Security Update : mozilla-xulrunner190 (mozilla-xulrunner190-832)

Firefox version upgrade to 3.0.9 to fix various security bugs. CVE-2009-1302,CVE-2009-1303,CVE-2009-1304,CVE-2009-1305,CVE -2009-1306,CVE-2009-1307,CVE-2009-1308,CVE-2009-1309,CVE-200 9-1310,CVE-2009-1311,CVE-2009-1312,CVE-2009-0652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2009-3512

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34740 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34741 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34742...

CVE-2009-2587

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34734 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34730 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34731 2009-07-20...

New Linux Flaw Enables Null Pointer Exploits

A researcher has published exploit code for a new vulnerability he discovered in the Linux kernel. The vulnerability is an especially interesting one in that the researcher who discovered it, Brad Spengler, has demonstrated that he can use the weakness to defeat many of the add-on security...

Office Web Components Flaw Used in SQL Injection Attacks

Attackers have begun using the unpatched vulnerability in Microsoft’s Office Web Components in SQL injection attacks. The vulnerability, which only became public this week, affects millions of users running a number of different versions of Windows, Office and Internet Explorer. The SANS Internet...

CVE-2009-2478

creationtimestamp| type| source ---|---|--- 2009-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9137 2009-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9181...

SAP Netweaver SQL Monitors — Multiple XSS

Application: SAP Netweaver Administrator panel Versions Affected: SAP Netweaver Administrator panel from ECC 6.0 Vendor URL: Bugs: XSS Exploits: YES Reported: 07.09.2009 Vendor response: 08.09.2009 Date of Public Advisory: 09.11.2010 Author: Alexandr Polyakov and Alexey Troshichev Description Ope...

Dowd, Hawkes Win Google Native Client Attack Contest

Mark Dowd and Ben Hawkes, two well-known security researchers, have won a contest put on by Google to find exploitable security flaws in the company’s Native Client system. The pair discovered 12 exploitable issues, seven more than the next most successful team. Dowd, a researcher in IBM ISS’s...

CVE-2009-2428

creationtimestamp| type| source ---|---|--- 2009-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34809 2009-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34810...

MS09-032: Cumulative Security Update of ActiveX Kill Bits (973346)

The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...

CMS Chainuk 1.2 LFI / XSS

CMS Chainuk = v.1.2 Vulns Home: Cms.tut.su Dork: "Cms.tut.su, 2009 g." eLwauxc 14.06.2 LFI /index.php --------------------------------------------------------------------------- 6: if isset$GET 'id' 7: 8: color=white$id = $GET 'id';/color 9: 10: else 11: 12: $id = $index; 13: 14: if fileexists...

CVE-2009-2341

creationtimestamp| type| source ---|---|--- 2009-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9080...

CVE-2009-2362

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9064 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9070 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9152...

CVE-2009-2364

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9060 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15489 2010-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15569...

CVE-2009-2363

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9070 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9064 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9152...

FreeBSD : nagios -- Command Injection Vulnerability (3ebd4cb5-657f-11de-883a-00e0815b8da8)

Secunia reports : A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise a vulnerable system. Input passed to the 'ping' parameter in statuswml.cgi is not properly sanitised before being used to invoke the ping command. This can be exploit...