PT-2011-1273

Name of the Vulnerable Software and Affected Versions OTRS versions prior to 2.2.7 Description The issue arises from improper handling of e-mail messages containing malformed UTF-8 characters in the Kernel/System/EmailParser.pm module of PostmasterPOP3.pl. This allows remote attackers to cause a...

PT-2011-1269

Name of the Vulnerable Software and Affected Versions OTRS versions prior to 2.3.2 Description The issue is related to the incorrect interpretation of permissions in the Kernel/System/Web/Request.pm module, which creates a directory under /tmp/ with 1274 permissions. This might allow local users ...

OTRS Multiple SQLi Vulnerabilities (OSA-2010-01)

Open Ticket Request System OTRS is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-0438

Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System OTRS 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0438: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System OTRS 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC

Exploit for unknown platform in category dos / poc ===================================================================== Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC ===================================================================== / cpndrv-dos.c Copyright c 2008 by...

Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC

No description provided by source. / cpndrv-dos.c Copyright c 2008 by [email protected] Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than 8+31-bytes results in t...

CVE-2006-7119: Undefined Security Weakness

PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via a URL in the CFGPHPGIGGLEROOT parameter...

solaris/sparc setreuid/execve 56 bytes

No description provided by source. / [email protected] setreuid shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode = "\x90\x1A\x40\x09" / xor %o1, %o1, %o0 / "\x92\x1A\x40\x09" / xor %o1, %o1, %o1 / "\x82\x10\x20\xCA" /...

FreeBSD-SA-00:19.semconfig

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:19 Security Advisory FreeBSD, Inc. Topic: local users can prevent all processes from exiting Category: core Module: kernel Announced: 2000-05-23 Credits: Peter Wemm...