LightNEasy 3.4.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================================= LightNEasy 3.4.2 Multiple Vulnerabilities =========================================================================...

kernel: ebtables stack infoleak

The doreplace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETADMIN capability ...

Cross site scripting

Cross-site scripting XSS vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2009-4999

Cross-site scripting XSS vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field...

DEBIAN-CVE-2010-1645

Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in 1 the FQDN field of a Device or 2 the Vertical Label field of a Graph Template...

Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out of the bag... His exploit...

DEBIAN-CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

PT-2009-6604 · Mysql Server +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: yaSSL versions prior to 1.9.9 MySQL versions prior to 5.0.90 MySQL versions prior to 5.1.43 MySQL versions 5.5.x through 5.5.0-m2 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service by...

CVE-2009-3914

Cross-site scripting XSS vulnerability in the Temporary Invitation module 5.x before 5.x-2.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Name field in an invitation...

PT-2009-4917 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A spoofing issue exists in the CryptoAPI component when handling X.509 certificates. This issue allows man-in-the-middle attackers to impersonate arbitrary SSL servers via a...

SILC Client Channel Name Format String Vulnerability

This host has SILC Client installed and is prone to Format String vulnerability. OpenVAS Vulnerability Test $Id: secpodsilcprdtschannelnameformatstringvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SILC Client & Toolkit Channel Name Format String Vulnerability Authors: Nikita MR Copyright: Copyrigh...

CVE-2009-3335

SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Name field...

Joomla! Component Turtushout 0.11 - Name SQL Injection

Joomla! Component Turtushout 0.11 - Name SQL Injection Joomla Component Turtushout 0.11SQL Injection 'Name' field SQL injection: test', '0.0.0.0' , 'test', SELECT CONCAT username, 0x20, email FROM users WHERE gid=25 limit 1 , '2009-08-07 13:52:38', 0, 'test', '0.0.0.0' -- ' jdc 2009 milw0rm.com...

Joomla Component Turtushout 0.11 (Name) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component Turtushout 0.11 Name SQL Injection Vulnerability =================================================================== Joomla Component Turtushout 0.11SQL...

Joomla! Component Turtushout 0.11 - 'Name' SQL Injection

Joomla Component Turtushout 0.11SQL Injection 'Name' field SQL injection: test', '0.0.0.0' , 'test', SELECT CONCAT username, 0x20, email FROM users WHERE gid=25 limit 1 , '2009-08-07 13:52:38', 0, 'test', '0.0.0.0' -- ' jdc 2009 milw0rm.com 2009-09-14...

Sql injection

SQL injection vulnerability in memberssearch.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field...

CVE-2009-2474

neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate...

curl: incorrect verification of SSL certificate with NUL in name

lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate...

nss regexp heap overflow

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL servers to cause a denial of service application crash or possibly...

Sql injection

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...