4131 matches found
Oracle SYS.DBMS_CDC_IMPDP package vulnerable to PL/SQL injection
Overview The Oracle SYS.DBMSCDCIMPDP package is vulnerable to PL/SQL injection. This vulnerability may allow a remote, authenticated attacker to execute arbitrary PL/SQL commands on a vulnerable Oracle installation. Description The Oracle SYS.DBMSCDCIMPDP package is vulnerable to PL/SQL injection...
Oracle CREATE_CHANGE_TABLE procedure vulnerable to PL/SQL injection
Overview The Oracle CREATECHANGETABLE procedure is vulnerable to PL/SQL injection. This vulnerability may allow a remote, authenticated attacker to execute arbitrary PL/SQL commands on a vulnerable Oracle installation. Description The Oracle CREATECHANGETABLE procedure fails to properly filter us...
[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability
ECHOADV55$2006 ------------------------------------------------------------------------ ----------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File Inclusion Vulnerability ------------------------------------------------------------------------ ----------------------- Author : Dedi...
[ECHO_ADV_50$2006]OpenDock Easy Blog <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability
ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
No description provided by source. ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== OpenDock Easy Doc =1.4 docdirectory File Include Vulnerabilities ==================================================================== ECHOADV49$2006...
WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== WebYep = 1.1.9 webyepsIncludePath File Include Vulnerabilities ================================================================== ECHOADV48$2006...
OpenDock Easy Blog <=1.4 (doc_directory) File Include Vulnerabilities
No description provided by source. ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Blog 1.4 - 'doc_directory' File Inclusion
ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
win32 WinExec Command Parameter 104+ bytes
win32 WinExec Command Parameter 104+ bytes. Shellcode exploit for win32 platform ; ; relocateable dynamic runtime assembly code example using hash lookup ; ; WinExec with ExitThread ; 104 bytes ; ; for testing: ; ; ml /c /coff /Cp wexec2.asm ; link /subsystem:windows /section:.text,w wexec2.obj ;...
[Full-disclosure] Ultimate Auction <=3.67
Hello! I've found a XSS in Ultimate Auction =3.67. The Vendor was informed mid October 2005! They still haven't fix the script and doesn't reply to mails. Here's a little Example: http://www.ultimate-auction.de/cgi-local/auktion/item.pl/item.pl?item=scriptalert"XSS"/script...
gmailbug.txt
Gmail Bug - INTRODUCTION This bug has already been corrected, that's why it's been published. In this manual you will see step by step how to exploit Gmail's vulnerability, that gave you access to any account, reported by Anelkaos, colaborator of elhacker.net's forum and patched by Google by...
Oracle DBMS_ASSERT and the October 2005 CPU
Whilst there are problems with the Oracle October 2005 Critical Patch Update, it's not all bad news.... There is a great deal of evidence in this patch that Oracle are beginning to treat security properly. They've introduced a new package PL/SQL package DBMSASSERT into the RDBMS. Whilst DBMSASSER...
Oracle October 2005 CPU Problems
Examining the Oracle October 2005 Critical Patch Update in depth, NGSResearchers discovered a number of problems which have all since been reported to Oracle. As well as new vulnerabilities and problems with the patches for old vulnerabilities, the October 2005 CPU fails to install the patched...
[Full-disclosure] Exploit Oracle DB27 - CPU Octobre
Exploit Oracle DB27 SQL exec sys.pbsde.init'AA',TRUE,'MARYANNDAVIDSONMARYANNDAVIDSONMARYA NNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMA RYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSO NMARYANNDAVIDSONMARYANNDAVIDSON',NULL; BEGIN...
[Full-disclosure] Oracle Workflow CSS Vulnerability wf_monitor
Dear FD-Reader, The Oracle Critical Patch Update October 2005 provides fixes for 2 Cross-Site- Scripting vulnerabilities in Oracle Workflow found by Red-Database-Security GmbH. I know that the severity and impact of CSS bugs is low. My critical security bugs in Oracle e.g. become DBA via the impo...
HP-UX PHSS_16649 : s700_800 11.00 Receiver Services October 1998 Patch
s700800 11.00 Receiver Services October 1998 Patch : The SharedX program recserv is vulnerable to a denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS16649. The text itself is...
Solaris 7 (sparc) : 108748-02
SunOS 5.7: /usr/lib/nfs/statd patch. Date this patch was last updated by Sun : Oct/03/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 9 (sparc) : 113273-16
SunOS 5.9: /usr/lib/ssh/sshd patch. Date this patch was last updated by Sun : Oct/19/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Multiple Vulnerabilities in Led-Forums
Product: Led-Forums Versions: Beta 1 Vulnerability: XSS- and redirection-Bug Date: October 30, 2003 Discovered by: ProXy [email protected] 1. - XSS-Bug The Welcome-Message of the Led-Forums software could be changed by everybody. Normal Text, HTML and Javascript it's all allowed! : eg:...