Lucene search
K

7971 matches found

0day.today
0day.today
added 2010/05/13 12:0 a.m.23 views

IPB 3.0.1 sql injection exploit

Exploit for php platform in category web applications =============================== IPB 3.0.1 sql injection exploit =============================== Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More inform...

6.7AI score
Exploits0
seebug.org
seebug.org
added 2010/05/13 12:0 a.m.19 views

Invision Power Board 3.0.1 sql injection exploit

No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB 3.0.1 sql injection exploit // Version 1.0 // written by Cryptovirus //...

6.7AI score
Exploits0
exploitpack
exploitpack
added 2010/05/13 12:0 a.m.22 views

Invision Power Board 3.0.1 - SQL Injection

Invision Power Board 3.0.1 - SQL Injection Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More information:\n"; echo "http://www.google.com/search?hl...

0.3AI score
Exploits0
seebug.org
seebug.org
added 2010/04/09 12:0 a.m.21 views

McAfee Email Gateway 6.7.2 Hotfix 2更新修复多个安全漏洞

BUGTRAQ ID: 39242 McAfee Email Gateway之前名为IronMail,是企业级的硬件邮件网关和管理平台。 McAfee Email Gateway的6.7.2 Hotfix 2之前版本中的多个漏洞允许本地用户导致拒绝服务、读取敏感信息、获得权限提升,或允许远程攻击者执行跨站脚本攻击。 1 处理CLI命令时的错误可能耗尽可用的系统资源。 2 由于没有正确地过滤提交给admin/queuedMessage.do页面的queueMsgType和QtnType参数,远程攻击者可以通过提交恶意请求执行跨站脚本攻击。 3...

6.9AI score
Exploits0
Exploit DB
Exploit DB
added 2010/04/06 12:0 a.m.47 views

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

Advisory Name: Local Privilege Escalation in McAfee Email Gateway formerly IronMail Vulnerability Class: Local Privilege Escalation Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local Severit...

7.4AI score
Exploits0
Debian CVE
Debian CVE
added 2010/04/05 4:0 p.m.23 views

CVE-2009-2936

The Command Line Interface aka Server CLI or administration interface in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to 1 execute arbitrary code via a vcl.inline...

7.5CVSS7.9AI score0.6839EPSS
Exploits7
ATTACKERKB
ATTACKERKB
added 2010/04/05 12:0 a.m.35 views

CVE-2009-2936

DISPUTED The Command Line Interface aka Server CLI or administration interface in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to 1 execute arbitrary code via a...

7.5CVSS7.4AI score0.6839EPSS
Exploits7References6
Positive Technologies
Positive Technologies
added 2010/04/05 12:0 a.m.4 views

PT-2010-1279 · Varnish · Varnish

Name of the Vulnerable Software and Affected Versions: Varnish versions prior to 2.1.0 Description: The Command Line Interface in the master process of the reverse proxy server does not require authentication for commands received through a TCP port. This allows remote attackers to execute...

7.5CVSS8.4AI score0.6839EPSS
Exploits7References13
Oracle linux
Oracle linux
added 2010/03/25 12:0 a.m.77 views

gnutls security update

1.0.20-4.0.1.el48.7 - Bump release to resolve ULN up2date issue 1.0.20-4.7 - fix crash in the gnutls-cli tool needed for testing 1.0.20-4.5 - fix safe renegotiation in SSL3 protocol 1.0.20-4.4 - implement safe renegotiation - CVE-2009-3555 533125...

7.5CVSS2.6AI score0.03741EPSS
Exploits15
OpenVAS
OpenVAS
added 2010/03/12 12:0 a.m.15 views

Fedora Update for bournal FEDORA-2010-3221

Check for the Version of bournal OpenVAS Vulnerability Test Fedora Update for bournal FEDORA-2010-3221 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

3.3CVSS6.4AI score0.00063EPSS
Exploits0References2
Fedora
Fedora
added 2010/03/09 3:32 a.m.23 views

[SECURITY] Fedora 13 Update: bournal-1.4.1-1.fc13

Bournal is a bash script that allows you to keep a personal, minimalistic, password-protected journal, log, or diary. It includes encryption, regexp searches, and a date-sorted list for editing old entries. Since Bournal is pure bash, it should be easily editable for the CLI-savvy...

3.3CVSS2.6AI score0.00063EPSS
Exploits0
Fedora
Fedora
added 2010/03/09 3:24 a.m.21 views

[SECURITY] Fedora 12 Update: bournal-1.4.1-1.fc12

Bournal is a bash script that allows you to keep a personal, minimalistic, password-protected journal, log, or diary. It includes encryption, regexp searches, and a date-sorted list for editing old entries. Since Bournal is pure bash, it should be easily editable for the CLI-savvy...

3.3CVSS2.6AI score0.00063EPSS
Exploits0
Fedora
Fedora
added 2010/03/09 3:23 a.m.15 views

[SECURITY] Fedora 11 Update: bournal-1.4.1-1.fc11

Bournal is a bash script that allows you to keep a personal, minimalistic, password-protected journal, log, or diary. It includes encryption, regexp searches, and a date-sorted list for editing old entries. Since Bournal is pure bash, it should be easily editable for the CLI-savvy...

3.3CVSS2.6AI score0.00063EPSS
Exploits0
securityvulns
securityvulns
added 2010/02/22 12:0 a.m.48 views

Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability Advisory ID: cisco-sa-20100217-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20100217-fwsm.shtml Revision 1.0 For...

7.8CVSS0.7AI score0.01418EPSS
Exploits0
OpenVAS
OpenVAS
added 2009/10/27 12:0 a.m.36 views

Mandrake Security Advisory MDVSA-2009:285 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:285. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

9.3CVSS6.9AI score0.04663EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2009/10/21 12:0 a.m.28 views

GuardianOS Privilege Escalation

Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less /tmp/top.log and type in '!/bin/sh'. Th...

1.3AI score
Exploits0
seebug.org
seebug.org
added 2009/10/20 12:0 a.m.20 views

Overland Guardian OS 5.1.041 privilege escalation

No description provided by source. Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2009/09/28 12:0 a.m.27 views

Mandrake Security Advisory MDVSA-2009:246 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:246. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

7.5CVSS7.6AI score0.03611EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2009/08/25 12:0 a.m.29 views

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : php5 vulnerability (USN-824-1)

It was discovered that PHP did not properly handle certain malformed JPEG images when being parsed by the Exif module. A remote attacker could exploit this flaw and cause the PHP server to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding...

4.3CVSS5.5AI score0.10087EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/08/17 12:0 a.m.20 views

Mandrake Security Advisory MDVSA-2009:167 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:167. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

4.3CVSS6.3AI score0.10087EPSS
Exploits1References2
Rows per page
Query Builder