httpd: mod_ssl per-connection memory leak for connections with zlib compression

Memory leak in the zlibstatefulinit function in crypto/comp/czlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service memory consumption via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server modssl that specify...

vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Blind SQL Injection Vuln

No description provided by source. --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza = 2.x vbplaza.php Remote Blind SQL Injection Vulnerability +==--...

CVE-2009-1789

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...

CVE-2009-1789

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...

httpd mod_proxy_ajp information disclosure

modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...

About remote file inclusion RFI analysis-vulnerability warning-the black bar safety net

Remote file includes in you include a remote file.. usually contains the file to be used for malicious purposes The back door What is the back door And your house has the front door... that should generally be welcome Backdoor unpopular, because people usually used to do bad things. Computer...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:020)

Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of service by using crafted files CVE: CVE-2008-5233. Heap-based...

Mod-Perl Perl-Status Cross Site Scripting

Vulnerability found: 28th February 2009 Vendor informed: 1st March 2009 Advisory last updated: 1st March 2009 Severity: Medium/High Credits: Richard Brain of ProCheckUp Ltd www.procheckup.com CVE reference: CVE-2009-0796 BID: 34383 Many thanks to Torsten Foertsch for his kind assistance in fixing...

DEBIAN-CVE-2009-0796

Cross-site scripting XSS vulnerability in Status.pm in Apache::Status and Apache2::Status in modperl1 and modperl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2006-7237

The CVE-2006-7237 entry describes a PHP remote file inclusion vulnerability in Ixprim 2.0, specifically in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php. The underlying issue is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code via a URL supplied in an u...

Ubuntu Update for libapache2-mod-perl2 vulnerability USN-488-1

Ubuntu Update for Linux kernel vulnerabilities USN-488-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4881.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libapache2-mod-perl2 vulnerability USN-488-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-430-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-488-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for libapache2-mod-python vulnerability USN-430-1

Ubuntu Update for Linux kernel vulnerabilities USN-430-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4301.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libapache2-mod-python vulnerability USN-430-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

PHP-Fusion Mod Book Panel (bookid) SQL Injection Vulnerability

No description provided by source. /+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\ + + + |----------------------------------------------------------------| + + | PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerabilit...

PHP-Fusion Mod Book Panel (course_id) SQL Injection Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home :...

PHP-Fusion Mod Book Panel (course_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP-Fusion Mod Book Panel courseid SQL Injection Vulnerability =================================================================...

PHP-Fusion Mod Book Panel - 'course_id' SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home : http://www.security-dz.com / soon mirror attack fo...

PHP-Fusion Mod Book Panel - course_id SQL Injection

PHP-Fusion Mod Book Panel - courseid SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home :...

PHP-Fusion Book Panel Module SQL Injection

/+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\ + + + |----------------------------------------------------------------| + + | PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability | + +...