107 matches found
Easy2Map <= 1.24 - SQL Injection
The Function.php file uses sprintf to format queries being sent to the database, this doesn't provide proper sanitisation of user input or properly parameterises the query. $ sqlmap -u 'http://www.example.com/wp-admin/admin-ajax.php'...
MediaWiki Denial of Service Vulnerability (CNVD-2015-02420)
MediaWiki is a Wiki program. A security vulnerability exists in MediaWiki version 1.24.x before 1.24.2. When the program uses the PBKDF2 algorithm to generate hashed passwords, a remote attacker can exploit the vulnerability to cause a denial of service CPU consumption with the help of extra-long...
AGEphone 1.28/1.38 SIP Packet Handling Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19148/info AGEphone is prone to a remote buffer-overflow vulnerability. Specifically, this issue presents itself when the application handles a malicious SIP Session Initiation Protocol packet. AGEphone versions 1.24 and...
www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest
www.eVuln.com advisory: "time" SQL Injection vulnerability in WSN Guest -----------Summary----------- http://evuln.com/vulns/175/summary.html eVuln ID: EV0175 Software: WSN Guest Vendor: n/a Version: 1.24 Critical Level: medium Type: SQL Injection Status: Unpatched. No reply from developers PoC:...
Security fix for the ALT Linux 8 package chrony version 1.24-alt1
Feb. 8, 2010 Victor Forsyuk 1.24-alt1 - 1.24. Contains security fixes for CVE-2010-0292, CVE-2010-0293, CVE-2010-0294...
[Full-disclosure] [vuln.sg] AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow
vuln.sg Vulnerability Research Advisory AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow by Tan Chew Keong Release Date: 2006-07-25 Summary ------- A vulnerability has been found in AGEphone. When exploited, the vulnerability allows execution of arbitrary code with privileges of the AGEpho...
Linux 2.4.24 with vserver 1.24 exploit
Hi securityfocus, a small exploit from me which brakes out of a vserver, also if secured with "chmod 000 /vservers". It is a modification of the known "chroot-again" exploit. It belongs to chroots but also to the vserver project. Tested with linux 2.4.24 and vserver 1.24. The bug was posted to th...