412 matches found
Abo CMS <= 5.4 remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications =================================================== Abo CMS = 5.4 remote SQL Injection Vulnerabilities =================================================== Author: Vladimir Vorontsov OnSec Russian Security Group In the popular content...
HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflow
$Id: hpnnmovalarmlang.rb 8192 2010-01-22 05:52:53Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
HP OpenView Network Node Manager ovalarm.exe Accept-Language buffer overflow
Added: 12/22/2009 CVE: CVE-2009-4179 BID: 37261 OSVDB: 60930 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow in the ovalarm.exe CGI program allows command execution when an attacker sends an HTTP request to this...
HP OpenView Network Node Manager ovalarm.exe Accept-Language buffer overflow
Added: 12/22/2009 CVE: CVE-2009-4179 BID: 37261 OSVDB: 60930 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow in the ovalarm.exe CGI program allows command execution when an attacker sends an HTTP request to this...
HP OpenView Network Node Manager ovalarm.exe Accept-Language buffer overflow
Added: 12/22/2009 CVE: CVE-2009-4179 BID: 37261 OSVDB: 60930 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow in the ovalarm.exe CGI program allows command execution when an attacker sends an HTTP request to this...
HP OpenView Network Node Manager ovalarm.exe Accept-Language buffer overflow
Added: 12/22/2009 CVE: CVE-2009-4179 BID: 37261 OSVDB: 60930 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow in the ovalarm.exe CGI program allows command execution when an attacker sends an HTTP request to this...
CVE-2009-4179: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action...
HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflow
This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53. By sending a specially crafted CGI request to ovalarm.exe, an attacker can execute arbitrary code. This specific vulnerability is due to a call to "sprintfnew" in the "isWide" function within "ovalarm.exe". A...
Novell Messenger Server 2.0 Accept-Language Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell...
CVE-2008-7153
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO...
Sql injection
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO...
CVE-2008-7153: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO...
Novell eDirectory多个拒绝服务漏洞
BUGTRAQ ID: 35666 CVECAN ID: CVE-2009-0192 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory的iMonitor组件在处理HTTP请求时存在栈溢出漏洞。如果攻击者发送了带有畸形Accept-Language头的HTTP请求，就可以触发这个溢出，导致服务器崩溃。 此外RDN中的多个通配符和LDAP报文也可能导致拒绝服务的情况。 Novell eDirectory 8.8 SP3 FTF3 Novell eDirectory 8.8 SP3 厂商补丁： Novell ------...
CVE-2009-0192
Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow...
CVE-2009-0192: Undefined Security Weakness
Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow...
Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities
Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35368/info Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...
Heap overflow
Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via 1 a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or 2 a long Accept-Language HTTP header,...
CVE-2009-0921: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via 1 a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or 2 a long Accept-Language HTTP header,...
Novell eDirectory iMonitor - Accept-Language Request Buffer Overflow (PoC)
Novell eDirectory iMonitor - Accept-Language Request Buffer Overflow PoC !usr/bin/perl -w Novell eDirectory iMonitor 'Accept-Language' Request Buffer Overflow Vulnerability Refer: https://www.securityfocus.com/bid/33928/discuss To run this exploit on MS Windows replace "!usr/bin/perl -w" with...
Novell eDirectory iMonitor Accept-Language头远程溢出漏洞
BUGTRAQ ID: 33928 Novell eDirectory是一个的跨平台的目录服务器。 如果向Novell eDirectory的iMonitor服务发送了包含有超长Accept-Language头的畸形报文的话，就可以触发缓冲区溢出，导致执行任意代码。 Novell eDirectory 8.8 SP3 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme5042340.html...