php 5.1.5 basic-functions.c 权限提升漏洞

No description provided by source...

The Uploader 2.0 File Disclosure Vulnerability

No description provided by source. Title: The Uploader 2.0 Remote File disclosure Vulnerability Author: Stack http://server/theuploader/api/downloadchecker.php?filename=../config.inc.php next open the config.inc.php file and you got the MySQL configuration user & password :d //MySQL configuration...

CVE-2009-4301

mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions...

CVE-2009-4136

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain...

IBM DB2 Universal Database Multiple SQL Functions Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is required to exploit this vulnerability. The specific flaw exists in the parsing of VARCHAR arguments to a number of stored procedures available by default on DB2...

CVE-2009-4124

Heap-based buffer overflow in the rbstrjustify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving 1 Stringljust, 2 Stringcenter, or 3 Stringrjust. NOTE: some of these details are obtained from third...

USN-870-1: PyGreSQL vulnerability

Steffen Joeris discovered that PyGreSQL 3.8 did not use PostgreSQL's safe string and bytea functions in its own escaping functions. As a result, applications written to use PyGreSQL's escaping functions are vulnerable to SQL injections when processing certain multi-byte character sequences. Becau...

Ubuntu 8.04 LTS / 8.10 : pygresql vulnerability (USN-870-1)

Steffen Joeris discovered that PyGreSQL 3.8 did not use PostgreSQL's safe string and bytea functions in its own escaping functions. As a result, applications written to use PyGreSQL's escaping functions are vulnerable to SQL injections when processing certain multi-byte character sequences. Becau...

Invision Power Board Local File Inclusion / SQL Injection

============================================= - Release date: December 4th, 2009 - Discovered by: Dawid Golunski - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL...

PHP multiple security vulnerabilities

safemode bypass via different functions...

[oCERT-2009-017] PHP multiple issues

2009-017 PHP multiple issues Description: PHP, an open source scripting language, suffers from several bugs that may pose a security risk. The reported issues have been discovered in several API functions, issues include buffer overflows, near null reads/writes, arbitrary memory read and an...

ruby -- heap overflow vulnerability

The official ruby site reports: There is a heap overflow vulnerability in Stringljust, Stringcenter and Stringrjust. This has allowed an attacker to run arbitrary code in some rare cases...

Quick.Cart 3.4 / Quick.CMS 2.4 - Cross-Site Request Forgery

Systems Affected: Quick.Cart 3.4 other versions untested, Quick.CMS 2.4 other versions untested Severity: Medium Vendor: http://opensolution.org/ Author: Alice Kaerast 0. Timeline 25-10-2009 Vulnerability discovered 26-10-2009 Vendor contacted 23-11-2009 No response from vendor, report published ...

Quick.Cart 3.4 Quick.CMS 2.4 - Cross-Site Request Forgery

Quick.Cart 3.4 Quick.CMS 2.4 - Cross-Site Request Forgery Systems Affected: Quick.Cart 3.4 other versions untested, Quick.CMS 2.4 other versions untested Severity: Medium Vendor: http://opensolution.org/ Author: Alice Kaerast 0. Timeline 25-10-2009 Vulnerability discovered 26-10-2009 Vendor...

CVE-2009-3933

CVE-2009-3933 affects WebKit as used in Google Chrome up to version prior to 3.0.195.32. The issue is a denial of service caused by a CPU-consuming hot path when a web page calls JavaScript setInterval, triggered by an incompatibility between WTF::currentTime and base::Time functions. The vulnera...

MySQL XML Functions Scalar XPath Denial of Service (CVE-2009-0819)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. MySQL Server...

Oracle Database SYS.KUPW-WORKER Package MAIN Procedure SQL Injection (CVE-2006-3698)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Oracle Database 10.1.0.5 - 10.2.0.4 AUTH_SESSKEY length validation

Exploit for unknown platform in category remote exploits ========================================================================== Oracle Database 10.1.0.5 - 10.2.0.4 AUTHSESSKEY length validation exploit ========================================================================== Title: Oracle...

Microsoft Windows LoadImage API Function Integer Overflow (CVE-2004-1049)

In terms of Microsoft Windows technology, a resource is binary data that can be added to the executable file of a Windows-based application. Graphical images such as icons, cursors and bitmaps are example of standard resources. Windows-based applications support loading and rendering of graphical...

kernel: netlink: fix numerous padding memleaks

The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the 1 tcfillqdisc, 2...