VP-ASP-SQL.txt

!!! WARNING !!! FOR EDUCATIONAL PURPOSES ONLY! Neither myself nor any of my Affiliates shall be liable for any direct, incidental, consequential, indirect or punitive damages arising out of access to, inability to access, or any use of the content of this advisory, including without limitation an...

Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01]

Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet AS01 Name Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet 6085705 AS01 Systems Affected Oracle Discoverer Servlet Severity Low Risk Category Remote D.o.S. Vendor URL http://www.oracle.com/ Author Alexand...

MOPB-22-2007:PHP session_regenerate_id() Double Free Vulnerability

Summary The sessionregenerateid function that is used to generate a new session identifier fails to clear an already freed pointer to the former session identifier before calling the session identifier generator. When this generator triggers an error this can result in a double free that is easil...

CVE-2007-1346

CVE-2007-1346 concerns ipmitool on Sun Fire X2100M2 and X2200M2. The connected sources indicate a local privilege escalation where a local user can gain elevated privileges and has the ability to reset or power off the server. The exact root cause, affected versions, and exploitation details are ...

Fedora Core 4 : sendmail-8.13.7-2.fc4.1 (2006-836)

Tue Jul 18 2006 Thomas Woerner 8.13.7-2.fc4.1 - using new syntax for access database 177566 - fixed failure message while shutting down sm-client 119429 resolution: stop sm-client before sendmail - fixed method to specify persistent queue runners 126760 - removed patch backup files from...

raptor_orafile.sql.txt

-- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.htm...

Privilege escalation using watch point — Mozilla

Shutdown demonstrated that it was possible to use a JavaScript watch to gain elevated privilege. This could be used to compromise the user's computer and install malware...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

Start the back door of one idea-the vulnerability of early warning-the black bar safety net

A Group Policy startup script; Use process:start the Group Policyrun-gpedit. msc-Computer Configuration-Windows Settings-scriptsstartup/shutdown Start with the shutdown related settings; Select Start-properties-add will pop up select the script name Selection procedure C:\windows\system32\net.exe...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

Sun Grid Engine unauthorized access

It's possible to shut down grid service without authentication...

CVE-2005-4773

Technical details, affected products, and exploit information for CVE-2005-4773 are not publicly provided in the connected documents. Monitor for updates from trusted sources.

Half-Life CSTRIKE Server <= 1.6 (non steam) Denial of Service Exploit

No description provided by source. !/usr/bin/perl Server must not be running steam. /str0ke Half-Life engine remote DoS exploit bug found by Firestorm tested against cstrike 1.6 Windows build-in server, cstrike 1.6 linux dedicated server use IO::Socket; die "usage: ./csdos host" unless $ARGV0;...

CVE-2005-4326

The web interface for American Power Conversion APC PowerChute Network Shutdown performs all communication in cleartext base64-encoded, which allows remote attackers to sniff authentication credentials...

CVE-2005-4326

The CVE-2005-4326 entry concerns APC PowerChute Network Shutdown’s web interface, where all communication is performed in cleartext (base64-encoded). This design allows remote attackers to sniff authentication credentials. Public references confirm the issue and the metric suggests a network-base...

Hack how to implement network overload attack completely resolves-bug warning-the black bar safety net

In network overload attack, a shared resource or service due to the need to process large amounts of request that cannot be met from other users of the arrival of the request. For example, a user generates a lot of processes, then other users cannot run own processes. If a user uses a lot of...