CVE-2009-2158

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

PT-2009-4610 · Torrenttrader · Torrenttrader Classic

Name of the Vulnerable Software and Affected Versions: TorrentTrader Classic version 1.09 Description: The issue allows remote attackers to obtain a password via a brute-force attack because the account-recover.php file chooses random passwords from an insufficiently large set. Recommendations: F...

ASP Football Pool 2.3 Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

ASP Football Pool 2.3 - Remote Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== ASP Football Pool 2.3 Remote Database Disclosure Vulnerability ============================================================== !/usr/bin/perl ASP Football Pool v2.3 Script : ASP...

ASP Football Pool 2.3 - Remote Database Disclosure

ASP Football Pool 2.3 - Remote Database Disclosure !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ;...

ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

No description provided by source. !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--,...

Microsoft Windows线程池ACL本地权限提升漏洞（MS09-012）

BUGTRAQ ID: 34444 CVECAN ID: CVE-2009-0080 Microsoft Windows是微软发布的非常流行的操作系统。 Windows对当前ThreadPool中的线程设置了错误的ACL，本地攻击者可以利用令牌劫持的方式获得权限提升。成功利用此漏洞的攻击者可以完全控制受影响的系统，攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 临时解决方法： IIS 6.0 -...

Microsoft Windows Vista2008 - Thread Pool ACL Privilege Escalation

Microsoft Windows Vista2008 - Thread Pool ACL Privilege Escalation source: https://www.securityfocus.com/bid/34444/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate th...

Microsoft Windows privilege escalation

Privilege escalation with MSDTC, WMI, RPCSS, Windows Thread Pool services...

Microsoft Windows Vista/2008 - Thread Pool ACL Privilege Escalation

source: https://www.securityfocus.com/bid/34444/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers. The issue affects the...

kernel security and bug fix update

2.6.9-78.0.17.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

MS09-0 0 1 Analysis-vulnerability warning-the black bar safety net

HD Moore moves really fast, the analysis has come out. The effect is only a DOS, not use. This update contains three vulnerabilities, the first one in the last 9 months out, only DOS, after two rather special, is not utilized, the reason is more complex, he is so described: The next two bugs CVE-...

security flaw

The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory vi...

security flaw

The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory vi...

Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS

Some days ago i have discovered a DoS in Windows Vista. Here is the advisory with a detailed description about the vulnerability that will help to Microsoft they have been already notified about the bug to correct it as soon as possible, and it will help you if you need to add any rule for your...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.101 allow remote attackers to inject arbitrary web script or HTML via the 1 propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, 2...

Important: kernel security and bug fix update

2.6.9-67.0.4.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach Brown orabug 5760648 - remove patch sysrq-b that queues upto keventd thread orab...

DEBIAN-CVE-2008-0299

common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool...

Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC

Exploit for unknown platform in category dos / poc ===================================================================== Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC ===================================================================== / cpndrv-dos.c Copyright c 2008 by...