DEBIAN-CVE-2007-2488

The IAX2 channel driver chaniax2 in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information memory contents or cause a denial of service application crash, by sending a frame that...

[SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1287-1 [email protected] http://www.debian.org/security/ Noah Meyerhans May 07, 2007 - ------------------------------------------------------------------------ Package : ldap-account-manager...

PostNuke pnFlashGames Module 1.5 Remote SQL Injection Vulnerability

No description provided by source. ============================================================ PostNuke pnFlashGames Module v1.5 REmote SQL Injection ============================================================ Bulan: xoron xoron.biz + Love's the funeral of hearts The funeral of hearts And a ple...

EsForum 3.0 (forum.php idsalon) Remote SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: EsForum 3.0 Script Download: http://www.editeurscripts.com/scripts/dl-esforum-3.html Contact: ilker Kandemir...

DSA-1282-1 php4

Bulletin has no description...

PHP-Ring Webring System 0.9 Remote SQL Injection Vulnerability

No description provided by source. Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: uPHPringwebsite Download.....: http://www.undoweb.frih.net ,...

Expow 0.8 (autoindex.php cfg_file) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Expow 0.8 autoindex.php cfgfile Remote File Inclusion Vulnerability ====================================================================== Expow 0.8 File manager...

PHP-Fusion Module topliste 1.0 - 'cid' SQL Injection

-------------------------------- PHP-FUSION topliste Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron - unique xoron.biz -------------------------------- Exploit:...

Active Photo Gallery Remote SQL Injection Vulnerability

Title : Active Photo Gallery Remote SQL Injection Vulnerability Author : CyberGhost My Web Site : http://aspspider.org/cgsecurity Demo Page : http://www.activewebsoftwares.com/demoactivephotogallery Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=11 Vuln. Username :...

NetVios Portal (page.asp) Remote SQL Injection Vulnerability

Title : NetVios Portal page.asp Remote SQL Injection Vulnerability Author : parad0x Contact : : D.Page : http://www.scriptaty.net/netvios-portal.html $$ : Free S.Page : http://www.netvios.com http://target/path/News/page.asp?NewsID=SQL Example: //News/page.asp?NewsID=-1 union select...

Active Auction Remote SQL Injection Vulnerability

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

aar-sql.txt

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

[Full-disclosure] dproxy - arbitrary code execution through stack buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ ||| Security Advisory AKLINK-SA-2007-001 ||| ||| CVE-2007-1465 CVE candidate ||| ============================================ dproxy - remotely exploitable buffer overflow...

aspWebCalendar 4.5 (calendar.asp eventid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== aspWebCalendar 4.5 calendar.asp eventid SQL Injection Vulnerability ===================================================================== Title : aspWebCalendar Remote S...

AspWebCalendar 4.5 - 'eventid' SQL Injection

Title : aspWebCalendar Remote SQL Injection Vulnerability Author : parad0x Contact : : D.Page : http://www.scriptdungeon.com/script.php?ScriptID=4306 $$ : free S.Page : http://fullrevolution.com http://target/path/calendar.asp?action=viewevent&eventid=SQL Example:...

Asterisk 1.4 SIP T.38 SDP - Parsing Remote Stack Buffer Overflow (PoC) (1)

Asterisk 1.4 SIP T.38 SDP - Parsing Remote Stack Buffer Overflow PoC 1 source: https://www.securityfocus.com/bid/23648/info Asterisk is prone to multiple remote stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before copying it...

Squid < 2.6.STABLE7 Multiple Remote DoS

Two vulnerabilities have been reported in Squid, which can be exploited by malicious people to cause a denial of service. Changes by Tenable: - added scriptname, revised description, added script dependency - added code to only run if report paranoia is "Paranoid". - fixed regex, added report...

X-ice News System 1.0 (devami.asp id) SQL Injection Vulnerability

No description provided by source. Title : X-ice News System v1.0 Remote SQL Injection Vulnerability Author : CyberGhost Page : http://www.x-ice.org/haber%5Fv1/ Download : http://aspindir.com/indir.asp?id=4601&sIslem=%DDndir Vuln. Username :...

GaziYapBoz Game Portal Remote SQL Injection Vulnerability

Title : GaziYapBoz Game Portal Remote SQL Injection Vulnerability Author : CyberGhost Page : http://ucgenportal.somee.com/scriptler/gaziyapboz Download : http://www.aspindir.com/indir.asp?id=4765&sIslem=DDndir Vuln. Username : /kategori.asp?kategori='+union+select+0,1,2,3,name,5,6,7,8,9+from+admi...

HC Newssystem 1.0-1.4 (index.php ID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= HC Newssystem 1.0-1.4 index.php ID Remote SQL Injection Vulnerability ======================================================================= HC NEWSSYSTEM 1.0-4...