CVE-2012-0982: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

Agent Zone Vastal I-Tech Real Estate SQL Injection

Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step http://www.vastal.com/real/search.php?pricefrom=1000000.00+and+1=1&priceto=10000000.00 T...

Vastal I-Tech Agent Zone - search.php Blind SQL Injection

Vastal I-Tech Agent Zone - search.php Blind SQL Injection Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...

Vastal I-Tech Agent Zone (search.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...

Vastal I-Tech Agent Zone - 'search.php' Blind SQL Injection

Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step http://server/real/search.php?pricefrom=1000000.00+and+1=1&priceto=10000000.00 The Secon...

Zone Rouge CMS 2012 - SQL Injection Vulnerability

Document Title: =============== Zone Rouge CMS 2012 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=391 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 391 Produ...

Zone Rouge CMS 2012 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Zone Rouge CMS 2012 - SQL Injection Vulnerability Google Dork: inurl:"driver.php?langue=" Date: 2012-01-21 Author: David Frankenstein Software Link: http://zonerouge.fr Version: Tested on: Exploit: Vulnerable Files: + driver.php...

Zone Rouge CMS 2012 - SQL Injection Vulnerability

Document Title: =============== Zone Rouge CMS 2012 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=391 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 391 Produ...

Freelance Zone - show_code.php SQL Injection

Freelance Zone - showcode.php SQL Injection source: https://www.securityfocus.com/bid/51533/info Freelance Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

MMORPG Zone - 'view_news.php' SQL Injection

source: https://www.securityfocus.com/bid/51532/info MMORPG Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

MMORPG Zone - view_news.php SQL Injection

MMORPG Zone - viewnews.php SQL Injection source: https://www.securityfocus.com/bid/51532/info MMORPG Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Freelance Zone - 'show_code.php' SQL Injection

source: https://www.securityfocus.com/bid/51533/info Freelance Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

CVE-2011-5056

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...

CVE-2011-5056: Uncontrolled Resource Consumption

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...

CVE-2011-5056

Removed by vendor...

glibc (important)

Specially crafted time zone files could cause a heap overflow in glibc CVE-2009-5029...

DSA-2370-1 unbound - several

Bulletin has no description...

CVE-2011-4528

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service daemon crash via a crafted response...

CVE-2011-4528: Undefined Security Weakness

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service daemon crash via a crafted response...

CVE-2011-3404

Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response body, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Content-Disposition Information Disclosu...