Aria 0.99-6 - page Local File Inclusion

Aria 0.99-6 - page Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-002 Application: aria-0.99-6 Web based ERP Versions Affected: aria-0.99-6 Vendor URL: http://www.tucows.net/ Bug: Local File Include Exploits: YES Reported: 09.01.2008 Vendor Response: None Date of...

Microsoft Windows Vista / XP / 2000 audio drivers privilege escalation

Ensoniq PCI 1371 WDM audio driver privilege escalation...

[Reversemode Paper] Exploiting WDM Audio Drivers

Hi, For those researchers who are interested in the driver security and also for driver writers, the paper "Exploiting WDM Audio Drivers" has been released. This paper explains an attack vector inherent to certain WDM audio drivers running on Windows Vista, XP, 2000 and 2003. Successful...

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation source: https://www.securityfocus.com/bid/27179/info Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability. Successful exploits allow local users to execute arbitrary machine cod...

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/27179/info Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability. Successful exploits allow local users to execute arbitrary machine code with kernel-level privileges, facilitating the complete compromise of...

RunCMS 1.6 - Blind SQL Injection (IDS Evasion)

// / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT: December 25, 2007 / / Written by:...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

AIX 530004 : U805053

The remote host is missing AIX PTF U805053 which is related to the security of the package devices.pci.1410eb02.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 520010 : U812069

The remote host is missing AIX PTF U812069 which is related to the security of the package devices.pci.14101103.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 520007 : U803055

The remote host is missing AIX PTF U803055 which is related to the security of the package devices.pci.14102e00.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 520009 : U808287

The remote host is missing AIX PTF U808287 which is related to the security of the package devices.pci.22106474.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530006 : U813570

The remote host is missing AIX PTF U813570 which is related to the security of the package devices.pci.00105000.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

AIX 520008 : U806045

The remote host is missing AIX PTF U806045 which is related to the security of the package PEXPHIGS.dev.pci.14107001 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

AIX 530005 : U809469

The remote host is missing AIX PTF U809469 which is related to the security of the package devices.pci.22106474.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

openSUSE 10 Security Update : kernel (kernel-4641)

This kernel update fixes the following security problems : ++ CVE-2006-6058: A local denial of service when mounting MINIX filesystems was fixed. ++ CVE-2007-4997: A 2 byte buffer underflow in the ieee80211 stack was fixed, which might be used by attackers in WLAN reach to crash the machine. and...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:195)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : A stack-based buffer overflow in the random number generator could allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool si...

PostgreSQL Server Detection

The remote service is a PostgreSQL database server, or a derivative such as EnterpriseDB. C Tenable Network Security, Inc. include "compat.inc"; if description scriptid26024; scriptversion"1.26"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/08/05"; scriptnameenglish:"PostgreS...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:060)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The 2.6.17 kernel and earlier, when running on IA64 and SPARC platforms would allow a local user to cause a DoS crash via a malformed ELF file CVE-2006-4538. The mincore function in the Linux kernel did not properly lock...

MDKA-2005:052 : ldetect-lst

The updated ldetect-lst packages provide five new PCI modem definitions in the hardware database. This will prevent drakconnect from misconfiguring these modems as a large number of Conexant and Smart Link modems share the same PCI ids, thus requiring additional information in the database. This...

Memory corruption

The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 w29n51.sys allows remote attackers to cause a denial of service system crash via crafted disassociation packets, which triggers memory corruption of "internal kernel structures," a different vulnerability than CVE-2006-6651. NOTE: this issu...