CVE-2006-7217

Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode...

CVE-2006-7216

CVE-2006-7216 affects Apache Derby prior to 10.2.1.6. The vulnerability arises because Derby does not determine privilege requirements for lock table statements at compilation time, and therefore does not enforce privilege checks at execution time. This allows remote authenticated users to lock a...

CVE-2006-7216

Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables...

Snort 2.6.1.1/2.6.1.2/2.7.0 (fragementation) Remote DoS Exploit

Exploit for multiple platform in category dos / poc =============================================================== Snort 2.6.1.1/2.6.1.2/2.7.0 fragementation Remote DoS Exploit =============================================================== / DOS Snort Inline Affected Versions: 2.6.1.1, 2.6.1.2,...

Important: spamassassin security update

3.1.8-2 - Fix sa-learn regression 228968 3.1.8-1 - 3.1.8 CVE-2007-0451 3.1.7-9 - silence sa-update cron script 3.1.7-8 - only restart spamd if necessary after sa-update 227756 3.1.7-7 - requires gnupg 227738 3.1.7-6 - explicit requires on perlHTTP::Date and perlLWP::UserAgent Bug 193100 3.1.7-5 -...

Authentication flaw

sre/params.php in the Integrity Clientless Security ICS component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie...

Dating Agent PRO 4.7.1 Vulnerability

Dating Agent PRO 4.7.1 http://www.datetopia.com/datingagent/ -------------------------------------- ------------- PHPinfo page /requirements.php ------------- SQL injection ------------- http://target.xx/picture.php?pid=1SQL http://target.xx/mem.php?mid=1SQL...

CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

aMember Pro 2.3.X - Remote File Include Vulnerability

aMember Pro 2.3.X - Remote File Include Vulnerability NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date:...

aMemberPro234.txt

NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date: Aug. 16 2005 Vendor: CGI Central Credit: =======...

AutoLinks Pro 2.1

NewAngels Advisory 1 AutoLinks Pro 2.1 - Remote File Include Vulnerability ============================================================================= Software: AutoLinks Pro Version: 2.1 Type: Remote PHP File Include Vulnerability Risc: High Date: 16.08.05 Vendor: ScriptsCenter Page:...

iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview File Overwrite Vulnerability

SGI IRIX grosview File Overwrite Vulnerability iDEFENSE Security Advisory 04.07.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 7, 2005 I. BACKGROUND The grosview application is a setuid root application that provides a graphical display of usage of certain types of...

phpbb2012.txt

-------------------------------------------------------------------- Written by [email protected] -------------------------------------------------------------------- -------------------------------------------------------------------- Exploit : 2.0.x = phpbb 2.0.12 :...

HP-UX PHCO_28425 : HP-UX calloc(3C), Local Denial of Service (DoS) (HPSBUX00310 SSRT2341 rev.2)

s700800 11.00 libc cumulative patch : calloc miscalculates the memory requirements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO28425. The text itself is copyright C Hewlett-Packard Development Company,...

Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)

Microsoft Windows - NetDDE Remote Buffer Overflow MS04-031 / HOD-ms04031-netdde-expl.c: 2004-12-30: PUBLIC v.0.2 Copyright c 2004 houseofdabus. MS04-031 NetDDE buffer overflow vulnerability PoC .:: houseofdabus ::. special unstable version...

Service Detection (2nd Pass)

This plugin is a complement of findservice1.nasl. It attempts to identify common services which might have been missed because of a network problem. C Tenable Network Security, Inc. if NASLLEVEL 2200 exit0; include"compat.inc"; ifdescription scriptid14772; scriptversion "$Revision: 1.51 $";...

Fedora Core 1 : mc-4.6.0-8.4 (2004-058)

Sat Jan 31 2004 Jakub Jelinek 4.6.0-8.4 - fix previous patch - Fri Jan 30 2004 Jakub Jelinek 4.6.0-8.3 - update php.syntax file 112645 - fix crash with large syntax file 112644 - Fri Jan 23 2004 Jakub Jelinek 4.6.0-8.2 - update CVE-2003-1023 fix to still make vfs symlinks relative, but with...

Authenticated Check : OS Name and Installed Package Enumeration

This plugin logs into the remote host using SSH, RSH, RLOGIN, Telnet, or local commands and extracts the list of installed packages. If using SSH, the scan should be configured with a valid SSH public key and possibly an SSH passphrase if the SSH public key is protected by a passphrase. TRUSTED...

Immunity Canvas: MS03_049

Name| ms03049 ---|--- CVE| CVE-2003-0812 Exploit Pack| CANVAS Description| Microsoft Windows Workstation Service RPC Overflow Notes| CVE Name: CVE-2003-0812 VENDOR: Microsoft Notes: This exploit will crash the service if XP SP1a is running under Virtual PC or Virtual Server Microsoft's...

GtkFtpd 1.0.4 - Remote Buffer Overflow

GtkFtpd 1.0.4 - Remote Buffer Overflow / gtkftpdv1.0.4and below: remote root buffer overflow exploit. by: vade79/v9 v9 at fakehalo.deadpig.org fakehalo/realhalo Url: http://gtkftpd.sourceforge.net/ GtkFtpd, versions v1.0.4 and belowas of this time, contain a remotely exploitable buffer overflow...