MySQL 5.1 < 5.1.41 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.41 and is, therefore, potentially affected by the following vulnerabilities : - An incomplete fix was provided in 5.1.24 for CVE-2008-2079, a symlink-related privilege escalation issue. Bug 39277 - MySQL clients linked...

MySQL 5.0 < 5.0.88 Multiple Vulnerabilities

The version of MySQL 5.0 installed on the remote host is earlier than 5.0.88. It is, therefore, potentially affected by the following vulnerabilities : - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. Bug 47320 - The GeomFromWKB function can be manipulated to...

MySQL拒绝服务和客户端证书校验漏洞

MySQL是一款流行的数据库服务程序。 MySQL存在多个安全漏洞，恶意攻击者可以进行拒绝服务和伪造攻击。 -链接OpenSSL库的MySQL客户端包含的"vioverifycallback"函数存在错误，MySQL服务器如果使用深度为零的证书，攻击者可以进行中间人攻击。 -对在WHERE子句中包含子查询的"SELECT"缺少错误处理和指派一个SELECT结果给用户变量，这个结果可导致服务程序崩溃。 -当处理Geometry值作为第一个参数时"GeomFromWKB"函数不正确保留参数的空值标记，可导致服务程序崩溃。 MySQL 5.x MySQL...

Oracle MySQL < 5.1.41 Multiple Vulnerabilities

Binary data 5240.prm...

MySQL < 5.1.41 Multiple Vulnerabilities

Binary data 801137.prm...

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service source: https://www.securityfocus.com/bid/37297/info MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions. An attacker can exploit these issues to crash the...

Joomla Component Com_Joomclip (cat) SQL injection

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Component ComJoomclip cat SQL injection + Author : 599eme Man + Contact : [email protected]...

Joomla! Component Com_Joomclip - 'cat' SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Component ComJoomclip cat SQL injection + Author : 599eme Man + Contact : [email protected]...

DEBIAN-CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

Oracle Network Authentication CVE-2009-1979 Remote Buffer Overflow Vulnerability

No description provided by source. include winsock2.h include stdio.h include string.h include windows.h include assert.h include string void ssend SOCKET s, char msg, DWORD size int sent; printf "ssend: begin: %d bytes\n", size; sent=send s, charmsg, size, 0; if sent==SOCKETERROR printf "send -...

Oracle Network Authentication CVE-2009-1979 Remote Buffer Overflow

Exploit for unknown platform in category remote exploits ================================================================================ Oracle Network Authentication CVE-2009-1979 Remote Buffer Overflow Vulnerability ==============================================================================...

Woven dream management system Background The find-a vulnerability warning-the black bar safety net

Sometimes in the by injection to give the weave the dream program's administrative password, but found that can't find the backend address. This time we can try the following in the address followed by: the/include/dialog/selectmedia. php? f=form1. murl But not necessarily pass to kill it.. By:th...

Dedecms select_soft_post. php page the variables are not the initial vulnerability-vulnerability warning-the black bar safety net

Text/ Flyh4t Affected versions: Dedecms 5.5 漏洞 产生 文件 位于 include\dialog\selectsoftpost.php, which is the variable$cfgbasedir not initialized properly, can lead to spare Through the identity authentication and system variable initialization file, cause you can upload any file to the specified...

union select control ewebeditor Upload File suffix-vulnerability warning-the black bar safety net

Form:dark group technology Forum union select control ewebeditor Upload File suffix2.16 Currently circulating online too much ewebeidtor a modified version of the lite version 2 1 6 version of ewebeditor the presence of an injection vulnerabilities after a version also exists such a problem Some...

SuSE9 Security Update : MySQL (YOU Patch Number 12175)

The database server mySQL was updated to fix two security problems : - MySQL allowed local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory, which can poin...

HB CMS 1.7 - SQL Injection

Securitylab.ir Application Info: Name: HB cms Version: 1.7 Website: http://www.hbcms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: inurl:/hbcms/php/ magicquotesgpc ...

Joomla com_jbudgetsmagic (bid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Joomla comjbudgetsmagic bid Remote SQL Injection Vulnerability ================================================================= Joomla comjbudgetsmagic SQL injection...

Ease Audio Cutter 1.20 Local Crash

!/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage : http://mp3-cutter.com Application Download : http://mp3-cutter.com/download/audiocutter.exe Description : Click Select file button, select our file and click Play $crash = "\x42" x 15000; my $file =...

Ease Audio Cutter 1.20 (.wav file) Local Crash PoC

No description provided by source. !/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage : http://mp3-cutter.com Application Download : http://mp3-cutter.com/download/audiocutter.exe Description : Click Select file button, select our file and click Play...

Ease Audio Cutter 1.20 (.wav file) Local Crash PoC

Exploit for unknown platform in category dos / poc ================================================== Ease Audio Cutter 1.20 .wav file Local Crash PoC ================================================== !/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage :...