1918 matches found
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
[SECURITY] Fedora 9 Update: DevIL-1.7.5-2.fc9
Developer's Image Library DevIL is a programmer's library to develop applications with very powerful image loading capabilities, yet is easy for a developer to learn and use. Ultimate control of images is left to the developer, so unnecessary conversions, etc. are not performed. DevIL utiliz es a...
mysql-info NSE Script
Connects to a MySQL server and prints information such as the protocol and version numbers, thread ID, status, capabilities, and the password salt. If service detection is performed and the server appears to be blocking our host or is blocked because of too many connections, then this script isn'...
WordPress MU 1.3.2 - active_plugins option Code Execution
WordPress MU 1.3.2 - activeplugins option Code Execution Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy cla...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Wordpress MU Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins optio...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
No description provided by source. ?php / WordPress MU blog's options overwrite Credits : Alexander Concha alex at buayacorp dot com Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to...
[SECURITY] Fedora 7 Update: id3lib-3.8.3-17.fc7
This package provides a software library for manipulating ID3v1 and ID3v2 tags. It provides a convenient interface for software developers to include standards-compliant ID3v1/2 tagging capabilities in their applications. Features include identification of valid tags, automatic size conversions,...
CVE-2007-4280
The Skinny channel driver chanskinny in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service application crash via a CAPABILITIESRESMESSAGE packet with a...
DEBIAN-CVE-2007-4280
The Skinny channel driver chanskinny in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service application crash via a CAPABILITIESRESMESSAGE packet with a...
CVE-2007-4280
The Skinny channel driver chanskinny in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service application crash via a CAPABILITIESRESMESSAGE packet with a...
GLSA-200707-04 : GNU C Library: Integer overflow
The remote host is affected by the vulnerability described in GLSA-200707-04 GNU C Library: Integer overflow Tavis Ormandy of the Gentoo Linux Security Team discovered a flaw in the handling of the hardware capabilities mask by the dynamic loader. If a mask is specified with a high population...
CVE-2007-3421
The 1 login, 2 admin profile edit, 3 reminder, 4 edit profile, 5 profile view, 6 gallery view, 7 gallery comment, and 8 gallery feedback capabilities in web-app.org WebAPP before 0.9.9.7 do not verify presence of users in memberlist.dat, which has unknown impact and remote attack vectors...
CVE-2007-3277
Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capabilities via unknown vectors...
CVE-2007-3277
Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capabilities via unknown vectors...
Weatimages 1.7.1 - ini[langpack] Remote File Inclusion
RFI Weatimages Hack Script name : Weatimages Script Download Adress:http://www.hotscripts.com/jump.php?listingid=52592&jumptype=1 Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?inilangpack=shelladress Google Dork : inurl: index.php?inilangpack= Author:Co-Sarper-Der...
Weatimages <= 1.7.1 ini[langpack] Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Weatimages = 1.7.1 inilangpack Remote File Inclusion Vulnerability ===================================================================== RFI Weatimages Hack Script name ...
Authentication flaw
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for admin/...
CVE-2007-1156
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for admin/...
CVE-2007-1156
CVE-2007-1156 affects JBrowser, where a direct request to the admin path (_admin/) allows remote attackers to bypass authentication and access administrative capabilities. The primary impact is unauthorized access to administrative functions, with the NVD entry listing a CVSS v2 base score of 7.5...
FreeBSD : snort -- DCE/RPC preprocessor vulnerability (afdf500f-c1f6-11db-95c5-000c6ec775d9)
A IBM Internet Security Systems Protection Advisory reports : Snort is vulnerable to a stack-based buffer overflow as a result of DCE/RPC reassembly. This vulnerability is in a dynamic-preprocessor enabled in the default configuration, and the configuration for this preprocessor allows for...