7491 matches found
TemaTres 1.0.3 (Auth Bypass/SQL/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== TemaTres 1.0.3 Auth Bypass/SQL/XSS Multiple Remote Vulnerabilities ====================================================================...
TemaTres 1.0.3 - Authentication Bypass SQL Injection Cross-Site Scripting
TemaTres 1.0.3 - Authentication Bypass SQL Injection Cross-Site Scripting || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
MULTIPLE REMOTE VULNERABILITIES--TemaTres 1.0.3-->
--------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES--TemaTres 1.0.3-- --------------------------------------------------- CMS INFORMATION: --WEB: http://www.r020.com.ar/tematres/ --DOWNLOAD: http://sourceforge.net/projects/tematres/ --DEMO:...
TemaTres 1.0.3 Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================= TemaTres 1.0.3 Remote Blind SQL Injection Exploit ================================================= !/usr/bin/perl...
TemaTres 1.0.3 - Authentication Bypass / SQL Injection / Cross-Site Scripting
|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...
Google Chrome < 1.0.154.59 ChromeHTML URI Handling Privilege Escalation
The version of Google Chrome installed on the remote host is earlier than 1.0.154.59. Such versions are reportedly affected by an issue when handling URLs with a 'chromehtml:' protocol that could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk. If...
EUVD-2008-3645
Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: the scope of this issue is limited since...
Fedora 7 : libpng10-1.0.37-1.fc7 (2008-3979)
This update fixes the way that libpng10 handles unknown zero-length chunks, which in previous versions could result in writing to attacker controlled addresses, depending on how the libpng api is used. To be affected, an application would have to call pngsetkeepunknownchunks, which tells libpng n...
GLSA-200804-30 : KDE start_kdeinit: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200804-30 KDE startkdeinit: Multiple vulnerabilities Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact : A local attacker could possibly execute...
KDE start_kdeinit: Multiple vulnerabilities
Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. startkdeinit is a wrapper for kdeinit. Description Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact A loca...
XPDF / Poppler uninitialized pointer dereference
User-controlled pointer dereference...
Debian: Security Advisory (DSA-681-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1149-1 (ncompress)
The remote host is missing an update to ncompress announced via advisory DSA 1149-1. Tavis Ormandy from the Google Security Team discovered a missing boundary check in ncompress, the original Lempel-Ziv compress and uncompress programs, which allows a specially crafted datastream to underflow a...
CVE-2007-4700
Unspecified vulnerability in WebKit on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to use Safari as an indirect proxy and send attacker-controlled data to arbitrary TCP ports via unknown vectors...
clamav-milter shell characters vulnerability
Insecure popen call with user-controlled value...
Design/Logic Flaw
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA formerly Computer Associates products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server...
CVE-2007-3336
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA formerly Computer Associates products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server...
CVE-2000-1243
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers...
Design/Logic Flaw
inimodifier sgid-zendtech in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this...