VideoDB <= 2.2.1 (pdf.php) Remote File Include Exploit

No description provided by source. ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+...

Secunia Research: Joomla BSQ Sitestats Component Multiple Vulnerabilities

====================================================================== Secunia Research 29/09/2006 - Joomla BSQ Sitestats Component Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

FreeType - .TTF File Remote Denial of Service

FreeType - .TTF File Remote Denial of Service source: https://www.securityfocus.com/bid/18329/info FreeType is prone to a denial-of-service vulnerability. This issue is due to a flaw in the library that causes a NULL-pointer dereference. This issue allows remote attackers to crash applications th...

FreeType - '.TTF' File Remote Denial of Service

source: https://www.securityfocus.com/bid/18329/info FreeType is prone to a denial-of-service vulnerability. This issue is due to a flaw in the library that causes a NULL-pointer dereference. This issue allows remote attackers to crash applications that use the affected library, denying service t...

FreeType - '.TTF' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/18326/info FreeType is prone to a buffer-overflow vulnerability. This issue is due to an integer-underflow that results in a buffer being overrun with attacker-supplied data. This issue allows remote attackers to execute arbitrary machine code in the...

427BB 2.2 - 'showthread.php' SQL Injection

source: https://www.securityfocus.com/bid/16169/info 427BB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...

427BB 2.2 - showthread.php SQL Injection

427BB 2.2 - showthread.php SQL Injection source: https://www.securityfocus.com/bid/16169/info 427BB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

427BB 2.2 - Authentication Bypass

427BB 2.2 - Authentication Bypass source: https://www.securityfocus.com/bid/16178/info 427BB is prone to an authentication bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data. An attacker can exploit this issue to bypass the authenticati...

[SA17378] Subdreamer Login SQL Injection Vulnerabilities

TITLE: Subdreamer Login SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17378 VERIFY ADVISORY: http://secunia.com/advisories/17378/ CRITICAL: Highly critical IMPACT: Manipulation of data, System access, Security Bypass WHERE: From remote SOFTWARE: Subdreamer 2.x...

Debian DSA-857-1 : graphviz - insecure temporary file

Javier Fernandez-Sanguino Pena discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SA16339] XOOPS PHPMailer and XML-RPC Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Debian DSA-744-1 : fuse - programming error

Sven Tantau discovered a security problem in fuse, a filesystem in userspace, that can be exploited by malicious, local users to disclose potentially sensitive information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

pMachine (PHP) : Include() Security Hole

Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...

Tripwire temporary files

------------------------------------------------------------ Insecure temporary files in Tripwire [email protected] $Date: 2001/07/09 05:02:02 $ ------------------------------------------------------------ Author: Jarno Huuskonen [email protected] Discovered: Tue 16 Jan 2001 Vendor...

Watchguard SOHO 2.2 - Denial of Service

Watchguard SOHO 2.2 - Denial of Service source: https://www.securityfocus.com/bid/2082/info The SOHO 2.2 is a popular SOHO firewall by Watchguard Technologies Inc. A vulnerability exists in Watchguard SOHO 2.2 firewalls with firmware versions 2.2.1 and below that could allow a remote attacker to...

linux2.2.1-proc-smp-race-sniffer.txt

Date: Tue, 2 Feb 1999 17:39:13 +0100 From: Andrea Arcangeli To: [email protected] Subject: patch /proc race fixes for 2.2.1 fwd This is a short analysis I've done yesterday about the array.c /proc/pid/... races of Linux-2.2.0 and Linux-2.2.1. These races was leading to very easily reproducible...

PT-1999-1087 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux version 2.2.1 Description: A race condition exists, allowing local users to read arbitrary memory from /proc files. Recommendations: For Linux version 2.2.1, update to a newer version that contains a fix for this issue...