New vulnerabilities in plugin DS-Syndicate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о Full path disclosure, Cross-Site Scripting и Directory Traversal уязвимостях в плагине DS-Syndicate для Joomla. Full path disclosure: http://site/index2.php?option=ds-syndicate&version=1&feedid=10A1 Хотя данная FPD имеет место в том же самом скрипте и том же сам...

Vulnerabilities in plugin DS-Syndicate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о SQL Injection и Full path disclosure уязвимостях в плагине DS-Syndicate для Joomla. SQL Injection: http://site/index2.php?option=ds-syndicate&version=1&feedid=-120or20version=5 Full path disclosure: http://site/index2.php?option=ds-syndicate&version=1&feedid=...

Mac OS X Security Update 2009-001

The remote host is missing Security Update 2009-001. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2004-2767

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service connection slot exhaustion by establishing many FTP sessions that persist for the lifetime of a DS session...

CVE-2004-2767: Undefined Security Weakness

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service connection slot exhaustion by establishing many FTP sessions that persist for the lifetime of a DS session...

DSEmu 0.4.10 Proof Of Concept

!/usr/bin/env python DSEmu 0.4.10 .nds local crash Software Link: http://double.co.nz/nintendods/dsemu-0.4.10.zip Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Open the file, and after 4 seconds the application shou...

DEBIAN-CVE-2010-0280

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c...

UBUNTU-CVE-2010-0280

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c...

CVE-2010-0220: Undefined Security Weakness

The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application crash via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also trigge...

DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== DS CMS 1.0 NewsId Remote SQL Injection Vulnerability ====================================================== Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site :...

DS CMS 1.0 - NewsId SQL Injection

DS CMS 1.0 - NewsId SQL Injection Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit...

DS CMS 1.0 - 'NewsId' SQL Injection

Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit +++++++++++++++++++++++...

CVE-2009-4148: Improper Control of Generation of Code

DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a 1 .ds, 2 .dsa, 3 .dse, or 4 .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a "script injection vulnerability."...

Sql injection

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter...

CVE-2009-2927

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter...

CVE-2009-2927

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter...

CVE-2009-2927

CVE-2009-2927 describes a SQL injection in DetailFile.php of DigitalSpinners DS CMS 1.0, exploitable via the nFileId parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The incident is characterized in NVD with a base score of 7.5 (HIGH) and network attack vect...

CVE-2009-2927: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter...

DS CMS 1.0 - nFileId SQL Injection

DS CMS 1.0 - nFileId SQL Injection ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :DS CMS 1.0 nFileId Remote SQL Injection Vulnerability + Script site :...

Novell eDirectory Multiple Vulnerabilities - Jul09 (Linux)

This host is running Novell eDirectory and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelledirmultvulnjul09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Novell eDirectory Multiple Vulnerabilities - Jul09 Linux Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...