5372 matches found
Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug)
Microsoft IIS 0Day Vulnerability in Parsing Files semi-colon bug Application: Microsoft Internet Information Services - IIS All versions Impact: Highly Critical for Web Applications Finding Date: April 2007 Report Date: Dec. 2009 Found by: Soroush Dalili Irsdl 4t yahoo d0t com Website:...
Buffer overflow
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager ASM 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager PSM 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service crash via unknown vectors...
CVE-2009-4420
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager ASM 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager PSM 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service crash via unknown vectors...
CVE-2009-4420
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager ASM 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager PSM 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service crash via unknown vectors...
CVE-2009-4420: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager ASM 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager PSM 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service crash via unknown vectors...
Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================= Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability ========================================================= Simple PHP Blog is prone to a local file-include vulnerability...
PDQ Script 1.0 <== [listingid] SQL Injection
Exploit for unknown platform in category web applications ============================================ PDQ Script 1.0 == listingid SQL Injection ============================================ +===================================================================================+ | | | PDQ Script 1.0 ...
PHP-Calendar 1.1 - 'update08.php?configfile' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/37450/info PHP-Calendar is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to execute arbitrary local and remote scripts in the...
VirtueMart 'product_id' Parameter SQL Injection Vulnerability
No description provided by source. Bugtraq ID: 37317 Class: Input Validation Error CVE: Remote: Yes Local: No Published: Dec 14 2009 12:00AM Updated: Dec 17 2009 06:03PM Credit: SOA Crew a.k.a Neo-GabrieL Vulnerable: VirtueMart VirtueMart 1.0 VirtueMart is prone to an SQL-injection vulnerability...
Pre Jobo.NET - Multiple SQL Injections
source: https://www.securityfocus.com/bid/41747/info Pre Jobo.NET is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...
To bypass the'Access Denied'-a vulnerability warning-the black bar safety net
jackal registerglobals = On ? php $sqlcontent = "? PHP exit’Access Denied’; ?& gt;".$ p."\ n"; fileputcontents$logfile, $sqlcontent; ?& gt;exp-demo. php? logfile=php://filter/write=convert. base64-decode/resource=abc. php&p=aPD9waHAgcGhwaW5mbygpOy8vPz4= http://marc.info/?l=full-disclosure& ... 7...
Easy Banner Pro - Cross-Site Request Forgery (Add Admin)
Easy Banner Pro - Cross-Site Request Forgery Add Admin Title: Easy Banner Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/4/easy-banner-pro-banner-exchange-script.html CVE : /\ == \ /\ \ /\ \ \ \ in...
Flashlight Free Edition <= 1.0 SQLi and Directory Traversal Vulnerability
Flashlight Free Edition is prone to SQL injection SQLi and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Clever use of voyagers to find out the fckeditor upload secure path-vulnerability warning-the black bar safety net
Recently a friend asked me to use the Fckeditor upload vulnerability and combined 2 0 0 3 the server parses the vulnerability to get the site webshell time is always not found after upload the path to the file, what should I do? Believe this problem should be a lot of friends encountered. First w...
UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions
UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible...
Joomla! Component MojoBlog 0.15 - Multiple Remote File Inclusions
Joomla! Component MojoBlog 0.15 - Multiple Remote File Inclusions Joomla Component MojoBlog Multiple Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 20, 2009 Software Information + Vendor : http://www.joomlify.com/ +...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
HP Power Manager Default Credentials
The remote host is running HP Power Manager, a web-based user definable UPS management and monitoring utility. The installed version has a default password 'admin' set. An attacker may connect to it to reconfigure the application and control remote UPSs. %NASLMINLEVEL 70300 C Tenable Network...