CVE-2018-7476

controllers/admin/Linkage.php in dayrui FineCms 5.3.0 has Cross Site Scripting XSS via the id or lid parameter in a c=linkage,m=import request to admin.php, because the xssclean protection mechanism is defeated by crafted input that lacks a '' character...

CVE-2018-7476: Improper Neutralization of Input During Web Page Generation

controllers/admin/Linkage.php in dayrui FineCms 5.3.0 has Cross Site Scripting XSS via the id or lid parameter in a c=linkage,m=import request to admin.php, because the xssclean protection mechanism is defeated by crafted input that lacks a '' character...

Linux Kernel < 2.6.37-rc2 ACPI custom_method Privilege Escalation

No description provided by source. / american-sign-language.c Linux Kernel 2.6.37-rc2 ACPI custommethod Privilege Escalation Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4347 This custommethod file allows to inject...

CVE-2014-1321

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

PT-2014-4103

Name of the Vulnerable Software and Affected Versions Apple OS X versions 10.9.x through 10.9.2 Description The issue allows physically proximate attackers to bypass the intended transition into the locked-screen state. This can be achieved by touching either a key or the trackpad during a...

CVE-2014-1321: Undefined Security Weakness

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

CVE-2010-5013

SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...

CVE-2010-5013

SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...

Sql injection

SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...

PT-2011-1948

Name of the Vulnerable Software and Affected Versions Mckenzie Creations Virtual Real Estate Manager VRM version 3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Lid parameter in the listing detail.asp file. Recommendations Fo...

CVE-2010-5013: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...

Sql injection

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter...

PT-2011-1868

Name of the Vulnerable Software and Affected Versions Geeklog version 1.3.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lid parameter in the filemgmt/singlefile.php file. Recommendations For Geeklog version 1.3.8, avoid using the lid...

PT-2011-1877

Name of the Vulnerable Software and Affected Versions eCal module in E-Xoopport Samsara versions 3.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lid parameter in the location.php file. Recommendations For versions 3.1 and...

CVE-2010-4942: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2010-4933: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter...

Портирование эксплойта ACPI custom_method.

Наткнулся недавно на упоминание декабрьского эксплойта Jon Oberheide. В качестве челленджа задался идеей портировать этот эксплойт. Первоначальный эксплойт работает только на ноутбуках где есть LID ACPI девайс состояния крышки и исключительно на 64-битных системах. Задача: портировать эксплойт на...

Linux Kernel 2.6.37-rc2 - ACPI custom_method Local Privilege Escalation

Linux Kernel 2.6.37-rc2 - ACPI custommethod Local Privilege Escalation / american-sign-language.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4347 This custommethod file allows to inject custom ACPI methods into the ACPI interpreter...

Sql injection

SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php...

CVE-2009-2591: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php...