Code injection

libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SGIO requests, which allows local users to cause a denial of service Programmed I/O mode on drives via multiple simultaneous invocations of an unspecified test program...

CVE-2008-5700

libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SGIO requests, which allows local users to cause a denial of service Programmed I/O mode on drives via multiple simultaneous invocations of an unspecified test program...

CVE-2008-5700: Undefined Security Weakness

libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SGIO requests, which allows local users to cause a denial of service Programmed I/O mode on drives via multiple simultaneous invocations of an unspecified test program...

FLDS 1.2a SQL Injection In lpro.php

Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/lpro.php?id=-1 UNION SELECT 1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11 from users demo:...

phpAddEdit 1.3 - editform Local File Inclusion

phpAddEdit 1.3 - editform Local File Inclusion phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform";...

CVE-2008-5382

Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...

CVE-2008-5382: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...

CVE-2008-5382

Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...

CVE-2008-5382

The CVE concerns I-O DATA DEVICE HDL-F series (HDL-F160, HDL-F250, HDL-F300, HDL-F320) firmware prior to 1.02, where the web-based management interface is vulnerable to Cross-Site Request Forgery (CSRF). The underlying issue is CSRF in the administrative web UI, enabling remote attackers to perfo...

RankEm (rankup.asp siteID) Remote SQL Injection Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script ...

RankEm (rankup.asp siteID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= RankEm rankup.asp siteID Remote SQL Injection Vulnerability =============================================================...

RankEm (auth bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= RankEm auth bypass Remote SQL Injection Vulnerability ======================================================= -----------------------------OffensiveTrack------------------------------...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

Code injection

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-3248: Exposure of Sensitive Information to an Unauthorized Actor

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

CVE-2008-4302

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...

Design/Logic Flaw

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...

CVE-2008-4210

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...