2209 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter...
CVE-2009-1623
Cross-site scripting XSS vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter...
CVE-2009-1623: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter...
Linux Kernel 2.6 UDEV < 141 Local Privilege Escalation Exploit
No description provided by source. / cve-2009-1185.c udev 141 Local Privilege Escalation Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185 udev before 1.4.1 does not verify whether a NETLINK message originates...
FreeBSD : imwheel -- insecure handling of PID file (e31d44a2-21e3-11d9-9289-000c41e2cdad)
A Computer Academic Underground advisory describes the consequences of imwheel's handling of the process ID file PID file : imwheel exclusively uses a predictably named PID file for management of multiple imwheel processes. A race condition exists when the -k command-line option is used to kill...
Command injection
The killsomethinginfo function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via ...
CVE-2009-1338
The killsomethinginfo function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via ...
CVE-2009-1338
The killsomethinginfo function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via ...
CVE-2009-1338
The CVE-2009-1338 issue is confirmed in the Linux kernel prior to 2.6.28, where the kill_something_info() function in kernel/signal.c did not respect PID namespaces when handling signals directed to PID -1. This allowed a local attacker to bypass namespace isolation and send signals to processes ...
CVE-2009-1338
The killsomethinginfo function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via ...
CVE-2009-1338: Undefined Security Weakness
The killsomethinginfo function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via ...
Linux Kernel 2.6 UDEV Local Privilege Escalation Exploit
No description provided by source. !/bin/sh Linux 2.6 bug found by Sebastian Krahmer lame sploit using LD technique by kcope in 2009 tested on debian-etch,ubuntu,gentoo do a 'cat /proc/net/netlink' and set the first arg to this script to the pid of the netlink socket the pid is udevdpid - 1 most ...
Mandriva Update for gnucash MDKSA-2007:046 (gnucash)
Check for the Version of gnucash OpenVAS Vulnerability Test Mandriva Update for gnucash MDKSA-2007:046 gnucash Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Green open terminal simple method-vulnerability warning-the black bar safety net
The presentation today of this open terminal, green, environmental protection, no pollution Not required to upload any files on the terminal the method is suitable for win2k,xp,2 0 0 3. This article premise is already through some method to get to the other side of a SYSTEM the permissions of the...
RHEL 4 : kernel (RHSA-2009:0331)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0331 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update addresses the following security issues: a...
CVE-2008-6333
CVE-2008-6333 affects RSS Simple News (RSSSN) and is a SQL injection in news.php when magic_quotes_gpc is disabled. The underlying issue is improper input handling on the pid parameter, allowing an attacker to alter SQL commands executed by the application. The CVSS vector indicates network acces...
CVE-2008-6333: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in news.php in RSS Simple News RSSSN, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2009-0728
SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...
CVE-2009-0728
SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...
CVE-2009-0728: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...