RankEm (rankup.asp siteID) Remote SQL Injection Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script ...

RankEm (rankup.asp siteID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= RankEm rankup.asp siteID Remote SQL Injection Vulnerability =============================================================...

RankEm (auth bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= RankEm auth bypass Remote SQL Injection Vulnerability ======================================================= -----------------------------OffensiveTrack------------------------------...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

Code injection

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-4302

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...

Design/Logic Flaw

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...

CVE-2008-4210

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

Linux Kernel 'truncate()'本地特权提升漏洞

BUGTRAQ ID: 31368 CVE ID：CVE-2008-4210 CNCVE ID：CNCVE-20084210 Linux是一款开放源代码的操作系统。 Linux内核'truncate'和'ftruncate'函数存在设计错误，本地攻击者可以利用漏洞提升特权。 当建立文件时，open/creat允许通过模式参数设置setgid位，由于bsdgroups mount选项或在setgid目录中建立文件，用户不属于新文件的组的成员。用户可以使用ftruncate和memory-mapped I/O使新文件成为任意两进制，获得此组的特权，原因是这些操作没有清除setgid位。...

FreeBSD Ports: mksh

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Unfixed XSS vulnerability at david-o-hara.com

Security researcher BackDoor, has submitted on 09/03/2008 a cross-site-scripting XSS vulnerability affecting david-o-hara.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2008. It is currently...

Unfixed XSS vulnerability at www.s-t-o-r-i-n-g.co.il

Security researcher xylitol, has submitted on 14/08/2008 a cross-site-scripting XSS vulnerability affecting www.s-t-o-r-i-n-g.co.il, which at the time of submission ranked 8346907 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It i...

CVE-2008-3535

Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...

Design/Logic Flaw

Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...

CVE-2008-3535

Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...

CVE-2008-3535

CVE-2008-3535 is an off-by-one error in the iov_iter_advance function of Linux kernel mm/filemap.c, addressed by multiple advisories. Public disclosures in Debian/Ubuntu indicate this allows local attackers to crash the system (denial of service) via certain sequences of readv/writev/file operati...

[SECURITY] Fedora 9 Update: squid-3.0.STABLE7-1.fc9

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

[web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =========:: Tornado Knowledge Retrieval Syste...

phpFix v2 Multiple SQL Injection Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: phpFix v2 Multiple SQL Injection...