python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

Advisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP Multibyte Shell Command Escaping Bypass Vulnerability Release Date: 2008/05/06 Last Modified: 2008/05/06 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 5 =...

DSA-1551-1 python2.4 - several vulnerabilities

Bulletin has no description...

Solaris 10 (sparc) : 120412-11 (deprecated)

SunOS 5.10: Simplified Chinese locale patc. Date this patch was last updated by Sun : Jan/20/10 This plugin has been deprecated and either replaced with individual 120412 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

python, tkinter security update

CentOS Errata and Security Advisory CESA-2007:1077-01 Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted,...

RHEL 2.1 : python (RHSA-2007:1077)

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An integer...

RHEL 3 / 4 : python (RHSA-2007:1076)

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An...

CentOS 3 / 4 : python (CESA-2007:1076)

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An...

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-4597)

This update fixes a buffer overflow in Mono's BigInteger implementation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bytefx-data-mysql-4597. The text description of this plugin is C SUSE...

openSUSE 10 Security Update : mono-core (mono-core-2373)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2373...

CVE-2007-4784

The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service application crash via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be...

Remote file inclusion

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter...

Python 2.5 - PyLocale_strxfrm Remote Information Leak

Python 2.5 - PyLocalestrxfrm Remote Information Leak source: https://www.securityfocus.com/bid/23887/info Python applications that use the 'PyLocalestrxfrm' function are prone to an information leak. Exploiting this issue allows remote attackers to read portions of memory. Python 2.4.4-2 and 2.5...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

No description provided by source. E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== E-GADS! 2.2.6 common.php locale Remote File Inclusion Vulnerability ===================================================================== E-GADS! 2.2.6 Remote File...

sqllitemanager120-multi.txt

SQLiteManager v1.2.0 Multiple Vulnerabilities ------------------------------------------------------- vendor : http://www.sqlitemanager.org/ Global risk : High ------------------------------------------------------- SQLite is a SQL managed portal like PhpMyAdmin. Multiple Cross Scripting...