Sybase Advantage Data Architect - '.SQL' Format Heap Overflow

Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link: http://www.sybase.com/products/databasemanagement/advantagedatabaseserver/data-architect-utility Version: 10.0 Tested on: Windows ...

Data/File - upload and Management Arbitrary File Upload

: Exploit Title: Data/File upload and management local shell upload : : Date: 14/10/2010 : : Author: saudi0hacker : : Software Link: http://resellscripts.info/index.php?route=product/product&productid=137 : : Version: All version : : Tested on: linux b0x : : Greetz to : All of my Friends :...

Oracle Secure Backup Administration property_box.php Command Injection (CVE-2010-0899)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allows for single point of management of data present on network attached storage NAS devices and distributed hosts which may have different operating systems. The data in transit is kept secure ...

1 1 4. Site Navigation Station system of V1. 1 3 XSS cross-site attacks-vulnerability warning-the black bar safety net

url-submit/index. php to submit the data is not filtered directly into the database,resulting in a savings ofXSSvulnerability Test method: In the Site Name column fill in thescript src=http://www. hackqing. cn/qingexp. js/script（src is fill in your own js file for the address,don't tell me that t...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle E-Business Suite 6.1.1.0 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2010-0865

Technical details for CVE-2010-0865 are not provided in the supplied documents. Public references mention an unspecified vulnerability in Oracle Agile Engineering Data Management / Oracle E-Business Suite 6.1.1.0; monitor for updates.

Autodesk SoftImage Scene TOC文件处理远程代码执行漏洞

BUGTRAQ ID: 36637 CVE ID: CVE-2009-3576 Autodesk Softimage是用于生成3D图形、3D模型和动画的图形应用程序。 Softimage默认会保持带有场景内容树的场景目录（.scntoc）文件。场景目录文件是包含有场景信息的XML文件，Softimage会查找相关的场景目录文件并应用其中的信息。用户可以编辑特制的.scntoc文件，加载了该文件后无需用户干涉就可以自动执行脚本。 Autodesk SoftImage XSI 6.x Autodesk SoftImage 7.x 临时解决方法： 通过以下步骤禁止自动读取SCTOC脚本：...

Autodesk SoftImage Scene TOC Arbitrary Command Execution

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk SoftImage Scene TOC Arbitrary Command Execution 1. Advisory Information Title: Autodesk SoftImage Scene TOC Arbitrary...

Code injection

Unspecified vulnerability in the Agile Engineering Data Management EDM component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2009-3392

Unspecified vulnerability in the Agile Engineering Data Management EDM component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2009-3392

CVE-2009-3392 affects Oracle E-Business Suite EDM (Agile Engineering Data Management) version 6.1.0.0. The Oracle October 2009 CPU lists EDM as vulnerable with CVSS v2 base around 5.4 (Adjacent Network, Medium complexity, Partial confidentiality/integ rity/availability impacts). Exploitation is d...

CentOS Update for python CESA-2007:1077-01 centos2 i386

Check for the Version of python OpenVAS Vulnerability Test CentOS Update for python CESA-2007:1077-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Buffer overflow

Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via unknown...

CVE-2008-5408

Symantec Backup Exec for Windows Servers is affected by CVE-2008-5408: a buffer overflow in the data management protocol affects multiple builds (11.0 6235/7170; 12.0 1364; 12.5 2213). The vulnerability allows remote authenticated users to cause a denial of service (application crash) and potenti...

createdirectory2sysdba.sql

--note windows adds 0D 0A to end as cTRL LF --WINDOWS VERSION 10.1 DECLARE fi UTLFILE.FILETYPE; bu RAW32767; bu2 varchar232767; bu3 varchar232767; BEGIN...

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.8.1-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

Common Data Format library: User-assisted execution of arbitrary code

Background The Common Data Format library is a scientific data management package which allows programmers and application developers to manage and manipulate scalar, vector, and multi-dimensional data arrays in a platform independent fashion. Description Alfredo Ortega Core Security Technologies...

kapda-450.txt

Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...

VERITAS Backup Agent Detection

The remote host is running a Backup Agent that uses the Network Data Management Protocol NDMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20175; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

HP Data Protector Detection

HP Data Protector formerly HP OpenView Storage Data Protector, a data management solution that automates backup and recovery, is running on the remote host. Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Changes by Tenable: 2016 May 17 Added banner string detection for new HP naming scheme HPE -...