Ubuntu 5.10 : mysql-dfsg-4.1 vulnerability (USN-180-2)

USN-180-1 fixed a vulnerability in the mysql-server package which ships version 4.0. Version 4.1 is vulnerable against the same flaw. Please note that this package is not officially supported in Ubuntu 5.10. Origial advisory : 'AppSecInc Team SHATTER discovered a buffer overflow in the 'CREATE...

PT-2006-1385 · Aoblogger · Aoblogger

Name of the Vulnerable Software and Affected Versions: aoblogger version 2.3 Description: The issue allows remote attackers to bypass authentication and create new blog entries. This is achieved by setting the uza parameter to 1 in the create.php file. Recommendations: For aoblogger version 2.3,...

Ubuntu 4.10 / 5.04 : mysql-dfsg vulnerability (USN-180-1)

AppSecInc Team SHATTER discovered a buffer overflow in the 'CREATE FUNCTION' statement. By specifying a specially crafted long function name, a local or remote attacker with function creation privileges could crash the server or execute arbitrary code with server privileges. However, the right to...

Cross site scripting

Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...

CVE-2006-0168

Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...

CVE-2006-0168

Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...

Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055)

Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation MS05-055 / helper.c commented out below ms05-055.c /str0ke / / MS05-055 Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Exploit Created by SoBeIt 12.25.2005 Main file of exploit Tested on: Windows 2000 PRO...

USN-180-2: MySQL 4.1 vulnerability

USN-180-1 fixed a vulnerability in the mysql-server package which ships version 4.0. Version 4.1 is vulnerable against the same flaw. Please note that this package is not officially supported in Ubuntu 5.10. Origial advisory: "AppSecInc Team SHATTER discovered a buffer overflow in the "CREATE...

CVE-2004-2639

Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors...

xarayaDOS.txt

Xaraya = 1.0.0 RC4 D.O.S / file corruption software: site: http://www.xaraya.com description: "Xaraya 1.0 Core is an Open Source web application framework written in PHP" vulnerable code in create function in xarMLSXML2PHPBackend.php: i you can create an empty dir, in some cases this leads to...

Xaraya <= 1.0.0 RC4 D.O.S / file corruption

Xaraya = 1.0.0 RC4 D.O.S / file corruption software: site: http://www.xaraya.com description: "Xaraya 1.0 Core is an Open Source web application framework written in PHP" vulnerable code in create function in xarMLSXML2PHPBackend.php: i you can create an empty dir, in some cases this leads to...

phpBB 2.0.13 (admin_styles.php) Remote Command Execution Exploit

Exploit for linux platform in category remote exploits ================================================================ phpBB 2.0.13 adminstyles.php Remote Command Execution Exploit ================================================================ !/usr/bin/perl r57phpbbadmin2exec.pl phpBB...

USN-180-1: MySQL vulnerability

AppSecInc Team SHATTER discovered a buffer overflow in the "CREATE FUNCTION" statement. By specifying a specially crafted long function name, a local or remote attacker with function creation privileges could crash the server or execute arbitrary code with server privileges. However, the right to...

CVE-2005-2489

Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Users/AddModifyInput.php...

Multiple MDaemon mail server vulnerabilities

DoS on incomlete CRAM-MD4 handshake, buffer overflow on IMAP CREATE command...

Alt-N MDaemon 8.0 - IMAP Server CREATE Remote Buffer Overflow (PoC)

Alt-N MDaemon 8.0 - IMAP Server CREATE Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/14315/info Alt-N MDaemon IMAP Server is affected by a remote buffer overflow vulnerability. This issue presents itself when an attacker submits excessive data through the CREATE command...

FreeBSD : mysql-server -- multiple remote vulnerabilities (619ef337-949a-11d9-b813-00d05964249f)

SecurityFocus reports : MySQL is reported prone to an insecure temporary file creation vulnerability. Reports indicate that an attacker that has 'CREATE TEMPORARY TABLE' privileges on an affected installation may leverage this vulnerability to corrupt files with the privileges of the MySQL proces...

CVE-2005-1759

Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751...

Forum Russian Board 4.2 Full Command Execution Exploit

No description provided by source. !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use...

Tcpdump - bgp_update_print Remote Denial of Service

/ 2005-05-31: Modified by [email protected] to test tcpdump infinite loop vulnerability. libnet 1.1 Build a BGP4 update message with what you want as payload Copyright c 2003 Fr d ric Raynal All rights reserved. Examples: empty BGP UPDATE message: ./bgp4update -s 1.1.1.1 -d 2.2.2.2 libnet 1.1...