CVE-2012-3565

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted characters in domain names, as demonstrated by "IDNA2008 tests."...

CVE-2012-3565

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted characters in domain names, as demonstrated by "IDNA2008 tests."...

Symantec WebGateway security vulnerabilities

Code execution, unfiltered shell characters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters...

CVE-2012-2595

Multiple cross-site scripting XSS vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters...

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

DEBIAN-CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

Buffer overflow

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

Tftpd32 DNS Server Denial Of Service Vulnerability

Title: Tftpd32 DNS Server Denial Of Service Vulnerability Software : Tftpd32 Software Version : v4.00 Vendor: http://tftpd32.jounin.net/ Vulnerability Published : 2012-05-26 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0, AV:N/AC:L/Au:N/C:N/I:N/A:P Bug Description : Tftpd32 ...

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

StyleDesign - Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Tftpd32 DNS 4.00 Denial Of Service

Title: Tftpd32 DNS Server Denial Of Service Vulnerability Software : Tftpd32 Software Version : v4.00 Vendor: http://tftpd32.jounin.net/ Vulnerability Published : 2012-05-26 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0, AV:N/AC:L/Au:N/C:N/I:N/A:P Bug Description : Tftpd32 ...

CVE-2012-1172

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid open square bracket characters in name values, which makes it easier for remote attackers to cause a denial of service malformed $FILES indexes or conduct directory traversal attacks during multi-file...

RHEL 5 / 6 : postgresql and postgresql84 (RHSA-2012:0678)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0678 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The pgdump utility inserted object names literally into...

CVE-2010-5104

The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sqlmode NOBACKSLASHESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query...

postgresql: SQL injection due unsanitized newline characters in object names

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

Nogod - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

TunInfo SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Yaqas CMS Alpha1 Information Disclosure

TITLE ....... Yaqas CMS Alpha1 Information Disclosure .................................... DATE ........ 25.03.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... YAQAS - Yet Another Question & Answer System @ google...