2695 matches found
Insomnia Security Vulnerability Advisory 100730.1
Insomnia Security Vulnerability Advisory: ISVA-100730.1 Name: EasyManage CMS Multiple SQL injection Vulnerabilities Released: 30 July 2010 Vendor Link: http://www.face.co.nz/easymanage Affected Products: Easy Manage CMS Original Advisory: http://www.insomniasec.com/advisories/ISVA-100730.1.htm...
Dell Ships Malware-Infected Server Motherboard
Dell has confirmed that some of its PowerEdge server motherboards were shipped to customers with malware code on the embedded server management firmware. The infected motherboard was found on replacement Dell PowerEdge R410 rack servers, according to a post on a Dell support forum. A Dell...
Oracle Database Server Crafted View Privilege Escalation (CVE-2006-1705)
A privilege escalation vulnerability exists in the Oracle Database Server product. The vulnerability is caused by a design error in the processing of Join Views. An attacker with limited privileges may exploit this vulnerability to gain escalated privileges. Leveraging the vulnerability allows an...
Razor CMS 1.0 Stable Cross Site Scripting
Vulnerability ID: HTB22376 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrazorcms.html Product: razorCMS Vendor: morgan integrated systems limited Vulnerable Version: 1.0 stable Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Ri...
Code injection
Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force...
CVE-2010-1942: Undefined Security Weakness
Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force...
JVN#90248889: Interstage Application Server vulnerable in request processing
The Servlet service provided by the Interstage Application Server from Fujitsu Limited, contains a vulnerability where certain requests may be handled improperly depending on the settings at the load balancing device. Impact Invalid requests may be processed or user information may be leaked...
DSA-2006-1 sudo - several vulnerabilities
Bulletin has no description...
Microsoft IIS Server Crafted ASP Page Buffer Overflow (MS06-034; CVE-2006-0026)
Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft Windows 2000, XP and Server 2003. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of...
Advanced Biz Limited 1.0 SQL Injection
================================================== ============================ By : PaL-D3v1L ================================================== ============================ » Advance Biz Limited = 1.0 Auth Bypass SQL injection Vulnerability ==================================================...
Advance Biz Limited <= 1.0 ( Auth Bypass ) SQL injection Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Advance Biz Limited = 1.0 Auth Bypass SQL injection Vulnerability ====================================================================== == SQL injection == Write This...
Advance Biz Limited <= 1.0 ( Auth Bypass ) SQL injection Vulnerability
No description provided by source. ================================================== ============================ By : PaL-D3v1L ================================================== ============================ » Advance Biz Limited = 1.0 Auth Bypass SQL injection Vulnerability...
Advance Biz Limited 1.0 - Authentication Bypass
================================================== ============================ By : PaL-D3v1L ================================================== ============================ » Advance Biz Limited = 1.0 Auth Bypass SQL injection Vulnerability ==================================================...
TFTP Server Buffer Overflow
!/usr/bin/env python This vuln is already owned by Muts , but i want to add the second methode Note: we don't have more space for shellcode or Skape egghunter 23 bytes only after SEH option I used the jumpback because is the best and easiest way for exploiting a SEH overwrite option Reference:...
Oracle Database Server ctxsys.driload Access Validation (CVE-2004-0637)
Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...
RHEL 3 : redhat-release (EOL Notice) (RHSA-2009:1526)
This is the 1-year notification of the End Of Life plans for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 will end on October 31, 2010. After this date, Red Hat will discontinue the...
Oracle Database Server MDSYS.SDO_LRS Package SQL Injection (CVE-2006-5340)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation
South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...
w3af (NASL wrapper)
This plugin uses w3af w3afconsole to be exact to find web security issues. See the preferences section for w3af options. Note that OpenVAS is using limited set of w3af options. Therefore, for more complete web assessment, you should use standalone w3af tool for deeper/customized checks. OpenVAS...
Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation
Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The...