CVE-2008-1125: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 themepath parameter to core/themes.php and the 2 filename parameter to download.php...

CVE-2008-1124: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to 1 components/xmlparser/loadparser.php; 2 admin.php, 3 categories.php, 4 categoriesadd.php, 5...

Squid Analysis Report Generator <= 2.2.3.1 buffer overflow

====================================================================== Squid Analysis Report Generator = 2.2.3.1 buffer overflow ====================================================================== Author: L4teral l4teral 4t gmail com Impact: buffer overflow Status: fixed version available...

Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities

No description provided by source. Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...

Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Vulnerabilities ===================================================================== Podcast Generator = 1.0 BETA 2...

Podcast Generator 1.0 Beta 2 - Remote File Inclusion File Disclosure

Podcast Generator 1.0 Beta 2 - Remote File Inclusion File Disclosure Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities...

podcast-rfidisclose.txt

Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...

Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure

Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...

DSA-1504-1 kernel-image-2.6.8 - several issues

Bulletin has no description...

Debian Security Advisory DSA 152-1 (l2tpd)

The remote host is missing an update to l2tpd announced via advisory DSA 152-1. OpenVAS Vulnerability Test $Id: deb1521.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 152-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 152-1 (l2tpd)

The remote host is missing an update to l2tpd announced via advisory DSA 152-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION EXPLOIT

---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / / . / /// // / / // / / / /// / / / / / // / / / / / / / / / / / / / / / / / // / / / / // / // / / / // 2007 //// // // // // / . -...

Invision Power Board (IP.Board) 2.1.7 - 'ACTIVE' Cross-Site Scripting / SQL Injection

---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 ////...

CVE-2007-6548

CVE-2007-6548 affects RunCMS up to version 1.6.1 and involves multiple direct static code injection vulnerabilities. Remote authenticated administrators can inject arbitrary PHP code via specific parameters in admin interfaces: header/footer (modules/system/admin.php), disclaimer (modules/system/...

Microsoft Windows 2000不安全随机号码生成器信息泄露漏洞

Security loophole in Windows 2000 exposes users' private info Cryptanalysis of the Random Number Generator of the Windows Operating System Microsoft Windows 2000是一款流行的操作系统。 Microsoft Windows 2000包含的随机号码生成器存在漏洞，本地攻击者可以利用漏洞获得用户Email,密码和信用卡等敏感信息。 问题存在于CryptGenRandom函数中，此漏洞可导致本地信息泄露而不能进行代码执行攻击，也不能远程访...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-508-1)

A buffer overflow was discovered in the Moxa serial driver. Local attackers could execute arbitrary code and gain root privileges. CVE-2005-0504 A flaw was discovered in the IPv6 stack's handling of type 0 route headers. By sending a specially crafted IPv6 packet, a remote attacker could cause a...

Ubuntu 6.10 : linux-source-2.6.17 vulnerabilities (USN-509-1)

A flaw in the sysfsreaddir function allowed a local user to cause a denial of service by dereferencing a NULL pointer. CVE-2007-3104 A buffer overflow was discovered in the random number generator. In environments with granular assignment of root privileges, a local attacker could gain additional...

Ubuntu 6.06 LTS / 6.10 / 7.04 : bind9 vulnerability (USN-491-1)

A flaw was discovered in Bind's sequence number generator. A remote attacker could calculate future sequence numbers and send forged DNS query responses. This could lead to client connections being directed to attacker-controlled hosts, resulting in credential theft and other attacks. Note that...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerability (USN-489-1)

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

Ubuntu 6.10 : linux-source-2.6.17 vulnerabilities (USN-486-1)

The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203 The Omnikey CardMan 4040 driver cm4040cs did not limit the size of buffers passed to read and write. A local attacker could exploit this to execute...