SA-CONTRIB-2010-070 - Multiple vulnerabilities in multiple contributed modules

Versions affected and proposed solutions Easy Translator for Drupal 6.x The module is vulnerable to SQL injections. Solution: Disable the module. There is no safe version of the module to use. Block Queue for Drupal 6.x The Block Queue module allows users to create "queues" of blocks much like...

CUPS texttops过滤器空指针引用漏洞

BUGTRAQ ID: 40943 CVE ID: CVE-2010-0542 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数 PostScript和raster打印机服务。 CUPS的texttops过滤器中缺少内存分配失败检查导致了空指针引用。攻击者可以创建恶意的文本文件，如果打印了该文件就会导致texttops崩溃或以lp用户权限执行任意代码。 Easy Software Products CUPS 1.4.4 厂商补丁： Easy Software...

Mac OS X CUPS Web界面信息泄露漏洞

BUGTRAQ ID: 40897 CVE ID: CVE-2010-1748 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X中CUPS web界面存在未初始化内存读取漏洞。如果攻击者可以访问CUPS Web界面，就可以使用特制的URL来利用这个漏洞从cupsd进程读取有限数量的内存，可能获取敏感信息。 Apple Mac OS X 10.6.4 Apple MacOS X Server 10.6.4 Easy Software Products CUPS 1.4.4 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

KubeLance 1.7.6 - 'profile.php' SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Kubelance SQL Injection Vendor url:http://www.kubelabs.com Version:1.7.6 Price:90$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members. Spl Greetz to:inj3ct0r.com Team,...

Ananda Image Gallery SQL Injection vulnerability

Exploit for asp platform in category web applications ================================================ Ananda Image Gallery SQL Injection vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Easy Travel Portal - SQL Injection

Easy Travel Portal - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Easy Travel Portal SQl Vulnerable Vendor url:http://www.softwebsnepal.com/ Version:2 Price:n/a Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all I...

Ananda Image Gallery - SQL Injection

Ananda Image Gallery - SQL Injection Exploit Title:Ananda Image Gallery SQL Vulnerable Vendor url:http://www.softwebsnepal.com/ Version:n/a Price:159$ Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and t...

Ananda Image Gallery - SQL Injection

Exploit Title:Ananda Image Gallery SQL Vulnerable Vendor url:http://www.softwebsnepal.com/ Version:n/a Price:159$ Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members. Spl Greetz...

Real Estate - SQL Injection

Real Estate - SQL Injection Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo ...

Real Estate - SQL Injection

Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo of the property. Which are...

Digital Interchange Calendar SQL Vulnerability

Exploit for asp platform in category web applications ============================================== Digital Interchange Calendar SQL Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...

Online Notebook Manager SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Online Notebook Manager SQL Injection Vulnerability =================================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Online Notebook Manager SQ...

Easy CD-DA Recorder 2007 Buffer Overflow

Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type of vuln : SEH Greetz to : Corelan Security Team The Cr...

Easy CD-DA Recorder 2007 SEH Buffer Overflow

Exploit for windows platform in category local exploits ============================================ Easy CD-DA Recorder 2007 SEH Buffer Overflow ============================================ Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0...

Easy CD-DA Recorder PLS Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in Easy CD-DA Recorder 2007 caused by an overlong string in a playlist entry. By persuading the victim to open a specially-crafted PLS file, a remote attacker can execute arbitrary code on the system or cause the application to cras...

Easy CD-DA Recorder 2007 - Local Buffer Overflow (SEH)

Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type of vuln : SEH Greetz to : Corelan Security Team The Cr...

Easy Address Book 1.2 Cross Site Request Forgery

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Easy Address book WebServer 1.2 - Cross-Site Request Forgery

Easy Address book WebServer 1.2 - Cross-Site Request Forgery |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

Easy Address book WebServer 1.2 - Cross-Site Request Forgery

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

B-Hind CMS Remote File Upload

Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: h00die DESCRIPTION by vendor: B-interference Lite is a simple CMS for small websites. Ideal for local merchants or organizations. The content of page can be adjusted bya simple double click on the text or title in...