2311 matches found
NeoBill CMS 0.8 Alpha - Multiple Vulnerabilities
NeoBill CMS 0.8 Alpha - Multiple Vulnerabilities Title: ====== NeoBill CMS v0.8 Alpha - Multiple Web Vulnerabilities Date: ===== 2012-08-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=685 VL-ID: ===== 685 Common Vulnerability Scoring System:...
Alpha Networks ADSL22+ Wireless Router ASL-26555 - Password Disclosure
Alpha Networks ADSL22+ Wireless Router ASL-26555 - Password Disclosure - Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject:...
Alpha Networks ADSL2/2+ Wireless Router ASL-26555 - Password Disclosure
Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject: http://a0rtega.pentbox.net/files/asl-26555-zombie.jpg - Summary: Alpha...
Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Password Disclosure
Exploit for hardware platform in category web applications - Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject:...
Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Password Disclosure
Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject: http://a0rtega.pentbox.net/files/asl-26555-zombie.jpg - Summary: Alpha...
CVE-2012-4257
CVE-2012-4257 affects Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 and concerns information disclosure: an invalid character in the PHPSESSID leads to an error message that reveals the installation path. The provided sources describe the issue as a remote information disclosure with p...
CVE-2011-2210
The osfgetsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restrict the data size for GSIGETHWRPB operations, which allows local users to obtain sensitive information from kernel memory via a crafted call...
CVE-2011-2208
Integer signedness error in the osfgetdomainname function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...
CVE-2011-2209
Integer signedness error in the osfsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...
CVE-2011-2211
The osfwait4 function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an incorrect pointer, which allows local users to gain privileges by writing a certain integer value to kernel memory...
Memory corruption
The osfgetsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restrict the data size for GSIGETHWRPB operations, which allows local users to obtain sensitive information from kernel memory via a crafted call...
Integer overflow
Integer signedness error in the osfgetdomainname function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...
Integer overflow
Integer signedness error in the osfsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...
Design/Logic Flaw
The osfwait4 function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an incorrect pointer, which allows local users to gain privileges by writing a certain integer value to kernel memory...
CVE-2011-2208
Integer signedness error in the osfgetdomainname function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...
CVE-2011-2210
The CVE-2011-2210 issue affects the Linux kernel on the Alpha platform, where osf_getsysinfo in arch/alpha/kernel/osf_sys.c does not properly bound the data size for GSI_GET_HWRPB, enabling local users to read kernel memory. Public sources confirm the root cause is improper data size restriction ...
CVE-2011-2211
CVE-2011-2211 concerns the Linux kernel on the Alpha architecture. The vulnerability lies in the osf_wait4 function (arch/alpha/kernel/osf_sys.c), where an incorrect pointer is used in versions prior to 2.6.39.4. This can allow local users to gain elevated privileges by writing a specific integer...
CVE-2011-2210
The osfgetsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restrict the data size for GSIGETHWRPB operations, which allows local users to obtain sensitive information from kernel memory via a crafted call...
CVE-2011-2209
The CVE-2011-2209 issue affects the Linux kernel on the Alpha architecture, where an integer signedness error in osf_sysinfo (arch/alpha/kernel/osf_sys.c) could allow local users to obtain sensitive information from kernel memory via a crafted call. Vulnerable when using kernel versions before 2....
CVE-2011-2209
Integer signedness error in the osfsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...