CVE-2009-3961

The CVE-2009-3961 entry describes an SQL injection in Super Serious Stats (aka superseriousstats) through user.php, exploitable via the uid parameter and related to an "incorrect regexp." The vulnerability affects versions before 1.1.2p1 and could allow remote attackers to execute arbitrary SQL c...

Linux Kernel KVM 'KVM_MAX_MCE_BANKS'内存破坏漏洞

Bugraq ID: 37035 Linux是一款开放源代码的操作系统。 Linux内核KVM中存在一个内存破坏问题，本地攻击者可以利用漏洞以超级用户特权执行任意指令。 系统只对32 MCE banksKVMMAXMCEBANKS分配了相应的内存，但是存在漏洞允许用户空间在setupmcgcap & 0xff上填充255，可破坏内核内存。 Linux kernel 2.6.31 .2 Linux kernel 2.6.31 -rc7 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix...

CVE-2009-3961: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user.php in Super Serious Stats aka superseriousstats before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information...

CVE-2009-3224

SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2009-3224

SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2009-3224

CVE-2009-3224 describes an SQL injection in the web app component: the file index.php of the Super Mod System when used with the 68 Classifieds 3.1 Core System . The vulnerability allows remote attackers to execute arbitrary SQL commands through the s parameter, enabling potential data disclosure...

CVE-2009-3224: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2008-7162

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

Buffer overflow

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-7162

CVE-2008-7162 describes a buffer overflow in Hero Super Player 3000 (Hero DVD Player 3.0.x family) that can be triggered by a long filename in an M3U playlist, allowing remote attackers to crash the application and potentially execute arbitrary code. The note indicates a possible relation to CVE-...

CVE-2008-7162

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-7162: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

iDefense Security Advisory 08.06.09: IBM AIX libC _LIB_INIT_DBG Arbitrary File Creation Vulnerability

iDefense Security Advisory 08.04.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 04, 2009 I. BACKGROUND IBM's AIX is a Unix operating system based on System V, which runs on the PowerPC PPC architecture. For more information, visit the product web site at the following URL...

Super Mod System 3.1.5 SQL Injection

---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

Super Mod System v3 (s) SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

Super Mod System 3.0 - s SQL Injection

Super Mod System 3.0 - s SQL Injection ---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

Super Mod System v3 (s) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Super Mod System v3 s SQL Injection Vulnerability ===================================================...

Super Mod System 3.0 - 's' SQL Injection

---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability

=========================================================================================== o wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability Software : WP Super Cache v0.8.3 Vendor : http://wordpress.org/ Download :...

CVE-2009-2553

Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter...