MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31798;...

phpTournois G4 - Arbitrary File Upload / Code Execution

Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not defined. So, using registerglobals, we can define it and let the CMS think we are authentificated. Using configuration zo...

Microsoft VBScript and JScript Scripting Engines Remote Code Execution Vulnerability

Description Microsoft VBScript and JScript are prone to a remote code-execution vulnerability because they fail to adequately handle user-supplied input. Attackers can leverage this issue by enticing an unsuspecting user to view a malicious web document. Successful exploits would allow arbitrary...

CVE-2008-4778

creationtimestamp| type| source ---|---|--- 2008-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5414 2008-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5447...

CVE-2008-1858

creationtimestamp| type| source ---|---|--- 2008-04-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5400 2010-05-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12560...

Site Sift Listings - id SQL Injection

Site Sift Listings - id SQL Injection powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage"...

Comdev News Publisher 4.1.2 - SQL Injection

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

comdev-sql.txt

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

Parallels Virtuozzo Containers 3.0.0-25.44.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery

Parallels Virtuozzo Containers 3.0.0-25.44.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/28589/info Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacke...

CVE-2008-6211

creationtimestamp| type| source ---|---|--- 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31598 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31601 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31602 2008-04-03...

Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery

Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/28593/info Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacker to...

CVE-2008-6196

creationtimestamp| type| source ---|---|--- 2008-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31587 2008-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31588 2008-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31589...

CVE-2008-1647

creationtimestamp| type| source ---|---|--- 2008-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5338 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7594...

Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure

Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure source: https://www.securityfocus.com/bid/28548/info Microsoft's Crypto API library is prone to an information-disclosure vulnerability because HTTP requests to arbitrary hosts and ports may be automatically trigger...

Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure

source: https://www.securityfocus.com/bid/28548/info Microsoft's Crypto API library is prone to an information-disclosure vulnerability because HTTP requests to arbitrary hosts and ports may be automatically triggered when validating X.509 certificates. Successful exploits allow attackers to...

CVE-2008-1560

creationtimestamp| type| source ---|---|--- 2008-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31546 2008-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31547...

BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report:...

PECL 3.0.x - Alternative PHP Cache Extension apc_search_paths() Remote Buffer Overflow

PECL 3.0.x - Alternative PHP Cache Extension apcsearchpaths Remote Buffer Overflow source: https://www.securityfocus.com/bid/28457/info PECL Alternative PHP Cache APC extension is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input...

DSECRG-08-022.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...

CVE-2008-1621

creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31543 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31544 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31545...