Fedora 12 : openldap-2.4.19-6.fc12 (2010-11319)

fixed regression caused by tls accept patch - updated autofs schema - openldap built with conectionless support Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora Update for couchdb FEDORA-2010-13665

Check for the Version of couchdb OpenVAS Vulnerability Test Fedora Update for couchdb FEDORA-2010-13665 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 12 Update: couchdb-0.11.2-2.fc12

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

Fedora 13 : openldap-2.4.21-10.fc13 (2010-11343)

Tue Jul 20 2010 Jan Vcelak - 2.4.21-10 - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free 605448 - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference 605452 - obsolete configuration file moved to /usr/share/openldap-servers 612602 - Thu Jul 1...

Monoloco CMS (page.php) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Monoloco CMS page.php Remote SQL Injection Vulnerability ========================================================== Author : KnocKout Thanks : DaiMon,Barcod3 Contact : email protected...

DEBIAN-CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

openldap: modrdn processing IA5StringNormalize NULL pointer dereference

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

Microsoft SQL Server Interesting Data Finder

This module will search the specified MSSQL server for 'interesting' columns and data. This module has been tested against the latest SQL Server 2019 docker container image 22/04/2021. This module requires Metasploit: https://metasploit.com/download Current source:...

Netvolution CMS 2.x - SQL Injection Script

Netvolution CMS 2.x - SQL Injection Script !/usr/bin/perl Exploit Title: Netvolution exploit script for CMS Version = 2.xx.xx.xx Date: 10/6/2010 Sotware Link: www.netvolution.net Bug found : amquen, krumel Exploited by: krumel Exploit Coded: mr.pr0n Many thanks to icesurfer author of SQLNINJA and...

Netvolution CMS 2.x - SQL Injection Script

!/usr/bin/perl Exploit Title: Netvolution exploit script for CMS Version = 2.xx.xx.xx Date: 10/6/2010 Sotware Link: www.netvolution.net Bug found : amquen, krumel Exploited by: krumel Exploit Coded: mr.pr0n Many thanks to icesurfer author of SQLNINJA and all p0wnbox members. I have contact...

Ticimax E-Ticaret - SQL Injection

Exploit Title: Ticimax E-Ticaret SQL Injection Date: 01.06.2010 Author: Neuromancer Version: app version CVE : if exists Code : exploit code Author: Neuromancer contact : msnatneurom4ncerdotcom From : TURKEY Ticimax e-ticaret Kategori.asp, urundetay.aspLocal SQL Injection Vulnerability Dork : "Bu...

Ticimax E-Ticaret SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Ticimax E-Ticaret SQL Injection Vulnerability ============================================= Author: Neuromancer contact : msnatneurom4ncerdotcom From : TURKEY Ticimax e-ticaret Kategori.asp,...

Entry Level Content Management System (EL CMS) - SQL Injection

Entry Level Content Management System EL CMS - SQL Injection + Contact : vir0e5athackermaildotcom + Group : TECON The Eye COnference Indonesia + Site : http://tecon-crew.org Software Information +SOftware : Entry Level Content Management System EL CMS +vendor : http://www.entrylevelcms.com/...

Liquid XML Studio LtXmlComHelp8.dll ActiveX OpenFile Buffer Overflow

Liquid Technologies develops and maintains an XML editor, Liquid XML Studio. Liquid XML is composed of an XML developers toolkit and IDE, enabling developers to design and develop XML Schema and applications. Bundled with the application is an ActiveX component that is registered on the system...

xBtiTracker - SQL Injection

xBtiTracker - SQL Injection Exploit Title: xBtiTracker Remote SQL Injection Vulnerability Date: 10.04.2010 Author: InATeam http://inattack.ru/ via Dominus Software Link: http://www.btiteam.org/ Version: xbtit v.2.0.0 - revision 559 and older Tested on: xbtit v.2.0.0 - revision 559 Code :...

Debian DSA-1918-1 : phpmyadmin - several vulnerabilities

Several remote vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3696 Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web...

Calendarix 0.8.20071118 - SQL Injection

Calendarix 0.8.20071118 - SQL Injection Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution ...

HTTP SOAP Verb/Noun Brute Force Scanner

This module attempts to brute force SOAP/XML requests to uncover hidden methods. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP SOAP Verb/Noun Brute Force Scanner', 'Description' = %q Thi...

CVE-2009-4486

Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema...

ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability

ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-001 January 7, 2010 -- CVE ID: CVE-2009-4486 -- Affected Vendors: Novell -- Affected Products: Novell iManager -- Vulnerability Details: This vulnerability allows...