9306 matches found
Debian DSA-165-1 : postgresql - buffer overflows
Mordred Labs and others found several vulnerabilities in PostgreSQL, an object-relational SQL database. They are inherited from several buffer overflows and integer overflows. Specially crafted long date and time input, currency, repeat data and long timezone names could cause the PostgreSQL serv...
YaBB Multiple Vulnerabilities
Binary data 2305.prm...
CSMailto.cgi Multiple Vulnerabilities
Binary data 1635.prm...
Microsoft IIS viewcode.asp Arbitrary File Access
Binary data 1710.prm...
US-CERT Technical Cyber Security Alert TA04-160A -- SQL Injection Vulnerabilities in Oracle E-Business Suite
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-160A SQL Injection Vulnerabilities in Oracle E-Business Suite Original release date: June 8, 2004 Last revised: -- Source: US-CERT Systems Affected Oracle Applications 11.0 all releases Oracle E-Business Suite 11i,...
Vulnerability in YaBB forum (Perl version without SQL)
There's a vulnerability in non-SQL version of YaBB forum I've checked it with YaBB 1 Gold - SP 1.2 written in Perl -- it's not new, but is in use even nowadays. You can input almost anything into .txt file from boards directory. The "subject" form field isn't checked for "n" symbols, so creating ...
Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS Based Cisco Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS-Based Cisco Products Revision 1.0 For Public Release 2004 April 20 21:00 UTC GMT - ------------------------------------------------------------------------- Summary ======= A vulnerability i...
Cisco Security Advisory: TCP Vulnerabilities in Multiple Non-IOS-Based Cisco Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: TCP Vulnerabilities in Multiple Non-IOS Cisco Products Revision 1.0 For Public Release 2004 April 20 21:00 UTC GMT - ------------------------------------------------------------------------- Summary ======= A vulnerability in...
xboing buffer overflow
No description provided...
PHPGedView 2.5/2.6 - 'Placelist.php' SQL Injection
source: https://www.securityfocus.com/bid/11910/info It is reported that PhpGedView is susceptible to a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to including it in an SQL query. This issue allows remote...
CVE-2003-0856
...
CVE-2003-0625
...
CVE-2002-0703
An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...
CVE-2002-0703
An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...
CVE-2002-0703
CVE-2002-0703 involves the perl-Digest-MD5 module and its interaction with Perl that can yield incorrect MD5 checksums for UTF-8 data, impairing data integrity verification. Mandrake’s MDKSA-2002:035 notes a UTF-8 handling bug in perl-Digest-MD5 and states that version 2.20 fixes the problem. The...
[blaqhatz] - Pastel Accounting application security issues
-----BEGIN PPP SIGNED MESSAGE----- Hash: SH1T ======================================================================== --blaqhatz-ph33r-blaqhatz-ph33r-blaqhatz-ph33r-blaqhatz-ph33r-blaqhatz-- ------------------------------------------------------------------------ blaqhatz!@!@!@! ADVISORY...
[SECURITY] [DSA 230-1] New bugzilla packages fix unauthorized data modification
-------------------------------------------------------------------------- Debian Security Advisory DSA 230-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2003 http://www.debian.org/security/faq -...
Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later
Hello, Over a year ago, I published a paper that attempted to analyze the randomness of PRNGs used in TCP/IP stacks on several operating systems. The approach I've chosen resulted in detecting some non-trivial dependencies in several generators, and some amusing 3D pictures. The original RAZOR...
