CVE-2009-4327

The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service memory consumption via unspecified vectors...

Avast! Corruption / Escalation

http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html =============Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation================ Authors: Giuseppe 'Evilcry' Bonfa' AbdulAziz Hariri E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org...

Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation

http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html =============Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation================ Authors: Giuseppe 'Evilcry' Bonfa' AbdulAziz Hariri E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org...

Avast! AntiVirus 4.8.1356 - 'aswRdr.sys' Driver Privilege Escalation

// source: https://www.securityfocus.com/bid/37031/info Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will...

Fedora 10 : texlive-2007-46.fc10 (2009-10730)

Fri Oct 23 2009 Jindrich Novy 2007-46 - add missing dependency on kpathsea - Thu Oct 15 2009 Jindrich Novy 2007-45 - make kpathsea not dependent on texlive - fix lacheck again 451513 - fix dvips configuration 467542 - update kpathsea description and summary 519257 - use upstream patch to fix pool...

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

apr security update

CentOS Errata and Security Advisory CESA-2009:1204 Updated apr and apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache Portable...

Moderate: Red Hat Security Advisory: apr and apr-util security update

Updated apr and apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache Portable Runtime APR is a portability library used by the...

the iis left the back door method-vulnerability warning-the black bar safety net

The company mail server using jsp+mysql on windows is bound to use to the tomcat. However tomcat is installed later on windows the default is system permissions, as long as the Get a shell, the server will be done. So in the service inside had taken down the right way, make the tomcat service to...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

CVE-2009-2606

The CVE-2009-2606 entry concerns ASP Football Pool 2.3 where sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the NFL.mdb database file via a direct request. The core issue is improper access control on the web root, leading to exposure of...

Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ================================================================= Citrix XenCenterWeb XSS/SQL/RCE Multiple Remote Vulnerabilities ================================================================= Secure Network - Security Research Advisory...

Citrix XenCenterWeb Multiple Vulnerabilities

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

CVE-2009-2158

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

PT-2009-4610 · Torrenttrader · Torrenttrader Classic

Name of the Vulnerable Software and Affected Versions: TorrentTrader Classic version 1.09 Description: The issue allows remote attackers to obtain a password via a brute-force attack because the account-recover.php file chooses random passwords from an insufficiently large set. Recommendations: F...

ASP Football Pool 2.3 Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== ASP Football Pool 2.3 Remote Database Disclosure Vulnerability ============================================================== !/usr/bin/perl ASP Football Pool v2.3 Script : ASP...

ASP Football Pool 2.3 - Remote Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

ASP Football Pool 2.3 - Remote Database Disclosure

ASP Football Pool 2.3 - Remote Database Disclosure !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ;...