35 matches found
CVE-2014-6310
CVE-2014-6310 describes a buffer overflow in CHICKEN (versions 4.9.0 and 4.9.0.1) that may allow remote attackers to execute arbitrary code via the 'select' function. The connected documents confirm the affected product and the vulnerable vector, but do not provide specific exploit details, PoCs,...
CVE-2014-6310
Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...
Java System Solutions SSO plugin for BMC MyIT Cross Site Scripting Vulnerability
Java System Solutions SSO plugin for BMC MyIT is a single-sign-on plugin for BMC MyIT from Java System Solutions, UK. A cross-site scripting vulnerability exists in Java System Solutions SSO plugin for BMC MyIT version 4.0.13.1. A remote attacker can exploit this vulnerability to inject client-si...
Raptor Web Application Firewall
Raptor Web Application Firewall Raptor Web Application Firewall is a simple web application firewall made in C, using KISS principle , to make poll use select function, is not better than epoll or kqueue from BSD but is portable, the core of match engine using DFA to detect XSS, SQLi and path...
php: NULL pointer dereference in pgsql extension
A NULL pointer dereference flaw was found in PHP's pgsql extension. A specially crafted table name passed to a function such as pginsert or pgselect could cause a PHP application to crash...
Irokez CMS 0.7.1 - Remote SQL Injection Vulnerability
No description provided by source. +--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Irokez 0.7.1 SQL inlection--------------------------------------------+...
Hiawatha < 8.5 Connection Saturation DoS
According to its server response header, the installed version of Hiawatha is a version prior to 8.5. A flaw exists in the 'select' function triggered when handling a large number of simultaneous connections that could result in a denial of service. C Tenable Network Security, Inc...
SCADA DNP3 select function code
...
CVE-2012-0805
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the 1 limit or 2 offset keyword to the select function, or unspecified vectors to the 3 select.limit or 4 select.offset function...
Irokez 0.7.1 SQL Injection
+--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Irokez 0.7.1 SQL inlection--------------------------------------------+...
Irokez CMS 0.7.1 - SQL Injection
+--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Irokez 0.7.1 SQL inlection--------------------------------------------+...
Irokez CMS 0.7.1 - SQL Injection
Irokez CMS 0.7.1 - SQL Injection +--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Irokez 0.7.1 SQL inlection--------------------------------------------+...
Stoney FTPd - rxBot mods ftpd Denial of Service
Stoney FTPd - rxBot mods ftpd Denial of Service / untested /str0ke / / rx-dos.c by D-oNe There exists a buffer overflow in Stoneys FTPd that most rxBot mod's use. The problem lies in how the code parses the PORT command and gives an opportunity for a buffer overflow. Problem is that the ftpd also...
fd_set -- bitmap index overflow in multiple applications
3APA3A reports: If programmer fails to check socket number before using select or fdset macros, it's possible to overwrite memory behind fdset structure. Very few select based application actually check FDSETSIZE value. ... Depending on vulnerable application it's possible to overwrite portions o...
