CVE-2008-1868

CVE-2008-1868 affects Blog Pixel Motion (Blog Pixel Motion) via admin/sauvBase.php, where authentication is not required. The underlying issue allows remote attackers to trigger a database backup dump and retrieve the resulting blogPM.sql, which contains sensitive information. The vulnerability e...

Heap overflow in ImageMagick's DCM and XWD coders

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via 1 a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or 2 the a colors or b comments field in a crafted XWD image, which results in a heap-based...

Design/Logic Flaw

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

Sun JDK image parsing vulnerabilities

Hi, A couple more JPEG ICC parsing bugs were fixed in the latest JDK updates. Full technical details: http://scary.beasts.org/security/CESA-2007-005.html The most interesting part is the faulty code: Limit = SpGetUInt32 Buf; ... UInt16Ptr = KpUInt16t SpMalloc Limit KpInt32tsizeof UInt16Ptr; ... f...

h2desk helpdesk path disclosure vulnerability

Heathco's h2desk helpdesk ticking system provides a ticketing solution for small and large organizations alike. Blah blah. On to the exploit. h2desk's session handling is custom and doesnt use the standard phpsession id handling. As a result, if you add a tic ' or any other invalid character to t...

openSUSE 10 Security Update : kernel (kernel-4986)

This kernel update fixes the following security problems : - CVE-2008-0600: A local privilege escalation was found in the vmsplicepipe system call, which could be used by local attackers to gain root access. - CVE-2007-6206: Core dumps from root might be accessible to the wrong owner. And the...

CentOS 4 : kernel (CESA-2008:0055)

Updated kernel packages that fix several security issues and a bug in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0055 Updated kernel packages that fix several security issues and a bug in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packag...

Important: kernel security and bug fix update

2.6.9-67.0.4.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach Brown orabug 5760648 - remove patch sysrq-b that queues upto keventd thread orab...

RHEL 4 : kernel (RHSA-2008:0055)

Updated kernel packages that fix several security issues and a bug in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Issue with core dump owner

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and a bug in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RHEL 5 : kernel (RHSA-2008:0089)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0089 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. These new kernel packages fix the following security...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0089 Updated kernel packages that fix several security issues and several bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel...

Important: kernel security and bug fix update

2.6.18-53.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574 ...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

Issue with core dump owner

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

Hot or Not Clone by Jnshosts.com Database Backup Dump Vulnerability

No description provided by source. Name : Hot or Not Clone by Jnshosts.com Dump backup And See Password Admin Download From : http://www.jnshosts.com/downloads/hot-or-not-clone-script/index.php Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Copyright @ 2007 Powered By Hot or Not...

SkyFex Client 1.0 ActiveX Start() Method Remote Stack Overflow

Exploit for unknown platform in category dos / poc ============================================================== SkyFex Client 1.0 ActiveX Start Method Remote Stack Overflow ==============================================================...

+ Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338

+==================================================================================================+ + Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338 + +==================================================================================================+...