DreamPoll 3.1 - SQL Injection

DreamPoll 3.1 - SQL Injection During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client...

DreamPoll 3.1 SQL Injection / XSS

During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes...

DreamPoll 3.1 Vulnerabilities

No description provided by source. During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a...

DreamPoll 3.1 - SQL Injection

During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes...

Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit

No description provided by source. / camisado.c AKA Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.24.2009 Another long night in ONC RPC fuzzing land... uname -a SunOS unknown 5.10 Generic139555-08 sun4u...

Oracle Database Enumeration

This module provides a simple way to scan an Oracle database server for configuration parameters that may be useful during a penetration test. Valid database credentials must be provided for this module to run. This module requires Metasploit: https://metasploit.com/download Current source:...

Fedora Core 10 FEDORA-2009-9386 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-9386. OpenVAS Vulnerability Test $Id: fcore20099386.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9386 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 10 : proftpd-1.3.2a-5.fc10 (2009-9386)

This update has a large number of changes from previous Fedora packages; the highlights are as follows: - Update to upstream release 1.3.2a - Fix SQL injection vulnerability at login 485125, CVE-2009-0542 - Fix SELinux compatibility 498375 - Fix audit logging 506735 - Fix default configuration...

Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit

/ camisado.c AKA Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.24.2009 Another long night in ONC RPC fuzzing land... uname -a SunOS unknown 5.10 Generic139555-08 sun4u sparc SUNW,Ultra-510 svcadm restart...

Sun Solaris 10 RPC dmispd DoS

No description provided by source. / camisado.c AKA Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.24.2009 Another long night in ONC RPC fuzzing land... uname -a SunOS unknown 5.10 Generic139555-08 sun4u...

SuSE9 Security Update : libexif (YOU Patch Number 12045)

Two bugs in libexif were identified by a Google Security Audit done by Meder Kydyraliev. - Loading EXIF data could be used to cause a infinite recursion and crash. CVE-2007-6351 - Integer overflows in the thumbnail handler could be used to overflow buffers and potentially execute code or crash a...

Taoyuan disk Getshell 洞子-vulnerability warning-the black bar safety net

Source:Prius special Affected version:latest Author:black God Jing the flow of God's love I and the silver God,the static flow of three in the penetration time,met this program examined the following,find this app you can directly Getshell precisely, or the use of the IIS that 洞子 Simple to say us...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1193 Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

Visionsoft Audit Multiple Vulnerabilities

Visionsoft Audit is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Tim Brown Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:visionsoft:audit";...

Web Application Tests Settings

This script sets options for generic web tests. It does not perform any test by itself. Several scripts use the options set here to test web applications, look for cross-site scripting attacks, SQL injection, etc. in CGIs. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

iPhone 3G S still not enterprise-ready

From Computerworld Matt Hamblen The new iPhone 3G S boasts remote data wipe, hardware-based encryption and tethering of the device to a laptop that would seem to please business users interested in protecting data and enhancing productivity. But no, those steps are not good enough for widespread...

util-linux security and bug fix update

2.12a-24.el4 - fix 458539 - man nfs : wrong information about nfs version used 2.12a-23.el4 - fix 485004 - move mount doesnt correctly update mtab 2.12a-22.el4 - fix 472186 - mount -a has problems with duplicate labels in a mpath setup - fix 471372 - RHEL4: fdisk cannot create partition with...

util security update

CentOS Errata and Security Advisory CESA-2009:0981 An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:118)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARE...

RHEL 4 : util-linux (RHSA-2009:0981)

An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities, such as fdisk and mount. A log...