CVE-2008-5164

The CVE-2008-5164 entry describes multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2. The issues allow remote attackers to inject arbitrary web scripts or HTML via the (1) id parameter to viewarticle.php and viewarticle2.php and the (2) PATH_INFO to viewarticle.php. Th...

CVE-2008-5163

The Rat CMS Pre-Alpha 2 contains SQL injection vulnerabilities in the viewarticle.php and viewarticle2.php scripts. The root cause is unsafe handling of the id parameter, enabling remote attackers to execute arbitrary SQL commands. Affected component: The Rat CMS Pre-Alpha 2 (web application). Im...

Linux Kernel i915驱动drivers/char/drm/i915_dma.c内存破坏漏洞

BUGTRAQ ID: 31792 CVECAN ID: CVE-2008-3831 Linux Kernel是开放源码操作系统Linux所使用的内核。 在使用Intel G33系列芯片组的机器上，非root用户可以通过ioctl调用只有root用户才可以使用的i915内核驱动的i915setstatuspage函数。本地攻击者可以通过向驱动发送特制的IOCTL清零并重新映射内存位置。 Linux kernel 2.6.x Debian ------ Debian已经为此发布了一个安全公告（DSA-1655-1）以及相应补丁: DSA-1655-1：New Linux 2.6.24...

Sql injection

SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a searchgames action...

iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection

!/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip ----------------------------------------------------- use strict; use...

[SECURITY] [DSA 1654-1] New libxml2 packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1654-1 [email protected] http://www.debian.org/security/ Steve Kemp October 14, 2008 http://www.debian.org/security/faq -...

CVE-2008-4529

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the ENVasicmspath parameter to 1 Association.php, 2 BigMath.php, 3 DiffieHellman.php, 4 DumbStore.php, 5 Extension.php, 6 FileStore.php, 7 HMAC.php, 8...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the ENVasicmspath parameter to 1 Association.php, 2 BigMath.php, 3 DiffieHellman.php, 4 DumbStore.php, 5 Extension.php, 6 FileStore.php, 7 HMAC.php, 8...

CVE-2008-4529

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the ENVasicmspath parameter to 1 Association.php, 2 BigMath.php, 3 DiffieHellman.php, 4 DumbStore.php, 5 Extension.php, 6 FileStore.php, 7 HMAC.php, 8...

CVE-2008-4529

CVE-2008-4529 : Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote code execution via a URL supplied to the _ENV[asicms][path] parameter for files under classes/Auth/OpenID/ (Association.php, BigMath.php, DiffieHellman.php, DumbStore.php, Extension.php, FileStor...

asicms-rfi.txt

=========================================================================================== o asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerability Software : asiCMS version alpha 0.208 Vendor : http://asicms.sourceforge.net/ Download :...

asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities =================================================================...

asiCMS alpha 0.208 - Multiple Remote File Inclusions

=========================================================================================== o asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerability Software : asiCMS version alpha 0.208 Vendor : http://asicms.sourceforge.net/ Download :...

Gentoo Security Advisory GLSA 200606-12 (mozilla-firefox)

The remote host is missing updates announced in advisory GLSA 200606-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1637-1] New git-core packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1637-1 [email protected] http://www.debian.org/security/ Devin Carraway September 15, 2008 http://www.debian.org/security/faq -...

[security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01539423 Version: 1 HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access NOTICE: The information in this Security Bulletin should be...

Command injection

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

CVE-2008-3947

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

CVE-2008-3947

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

OpenVMS fingerd remote stack overflow

sup bugtraq. Since a group of lads are giving a talk on Hacking OpenVMS at defcon I figured I'd release a vulnerability in the OpenVMS finger service part of the MultiNet package to give people a few days to figure out an exploit before the methods are documented for us by the guys giving the tal...