DEBIAN-CVE-2013-4184

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...

DEBIAN-CVE-2010-3438

libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as "some text\rQUIT" to the 'privmsg' handler, which would cause the client to disconnect from the server...

Perl heap overflow vulnerability (CNVD-2019-09595)

Perl is a high-level, general-purpose, interpreted, dynamic programming language. A heap overflow vulnerability exists in Sregatom in 'regcomp.c' in Perl 5.26 during compilation, which can be exploited by a remote attacker to execute arbitrary code via specially crafted regular expressions...

Perl Net::Ping::External extension command injection vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall.Net::Ping::External extension is one of the cross-platform Ping tools. A security vulnerability exists in Perl Net::Ping::External extension version 0.15 and earlier, which is caused by the...

Perl XML-LibXML Module Arbitrary Code Execution Vulnerability

Perl is an American programmer Larry Wall Larry Wall developed a cross-platform programming language. XML-LibXML is one of the Debian-based XML file conversion module. An arbitrary code execution vulnerability exists in Perl's XML-LibXML module =2.0129, which can be exploited by a remote attacker...

DEBIAN-CVE-2016-1251

There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x and 4.x before 4.041 when used with mysqlserverprepare=1...

Perl Local Elevation of Privilege Vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security vulnerability exists in Perl. A local attacker can exploit this vulnerability by supplying specially crafted data to the XSLoader component to gain privileges on the target syst...

Perl 'rmtree()' Function Local Insecure Permissions Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29902/info Computers running Perl are prone to a local vulnerability that occurs when handling symbolic links. Attackers can leverage this issue to change the permissions of arbitrary files. Perl 5.10.0 is vulnerable; oth...

Mandriva Linux Security Advisory : perl-Dancer (MDVSA-2013:184)

Updated perl-Dancer package fixes CVE-2012-5572 A security flaw was found in the way Dancer.pm, lightweight yet powerful web application framework / Perl language module, performed sanitization of values to be used for cookie and cookies methods. A remote attacker could use this flaw to inject...

[SECURITY] Fedora 18 Update: perl-5.16.2-237.fc18

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

[USN-1129-1] Perl vulnerabilities

========================================================================== Ubuntu Security Notice USN-1129-1 May 03, 2011 perl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

CentOS 4 : perl (CESA-2005:880)

Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...

PAJAX <= 0.5.1 Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print "PAJAX Remote Code Injection - code by: Stoney - exploit found by: RedTeam\n"; if $ARGV0 && $ARGV1 $host = $ARGV0; $path = $ARGV1; $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die...

"Старый добрый" DForum

"Старый добрый" DForum 4пальца Удивительное дело, сообщество вебмастеров в интернете на редкость консервативно. Многие скрипты, которые были созданы в конце девяностых, до сих пор находят себе применение на самых разных сайтах. А старые скрипты - это старые болячки, как я писал в одной из статей...

DEBIAN-CVE-2002-0703

An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...

GOBBLES CGI MARATHON #001

PRODUCT AdRotate Pro http://www.vanbrunt.com/adrotate/ This is used by a lot of sites out there in the wild. DESCRIPTION AdRotate is ad rotating software written in Perl language, which uses DBI with mysql driver to access database. Included with software is module adrotate.pm which contains...