9565 matches found
Oracle GlassFish Server Administration Console Authentication Bypass
Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL: Date published: 2011-05-11 Date of last update: 2011-05-11 Vendors contacted: Oracle...
TeamSHATTER Security Advisory: Oracle Malformed Network Package Spins CPU
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory April 21, 2011 Risk Level: High Affected versions: Oracle Database Server version 10gR1, 10gR2, 11gR1 and 11gR2 on Windows platform Remote exploitable: Yes Credits: This vulnerability was discovered and researched by...
[Onapsis Security Advisory 2011-007] Oracle JD Edwards JDENET Kernel Shutdown
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2011-007: Oracle JD Edwards JDENET Kernel Shutdown This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...
Nic.cl Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Main URI: http://www.nic.cl Type: Cross Site Scripting Exploitable URI: http://www.nic.cl/cgi-bin/show-form?f=/example/201001191941%3Cbody%20onload=alert%28this%29%3E3a6 Status: Reported Date: April 20, 2011, 12:27 p.m. Reported on:...
[DCA-2011-0010] TOTVS Microsiga Protheus ERP - Memory Corruption
DCA-2011-0010 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Application Server Vendor Product Description - Software de Gesto - TOTVS - TOTVS is a software company, innovation, relationship and support management, the...
PT-2011-1062 · Suse +2 · Ext4Dev-Kmp-Trace +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the Generic Receive Offload GRO implementation in the Linux kernel. A problem in the napi reuse skb function in net/core/dev.c does not reset the values of certain...
WordPress Placester 0.1.0 Cross Site Scripting
------------------------------------------------------------------------ Software................WordPress Placester 0.1.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.wordpress-plugin.org/plugin/placester-plugin/...
jHTTPd 0.1a Directory Traversal Vulnerability
Exploit for multiple platform in category remote exploits ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5...
jHTTPd 0.1a Directory Traversal Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery...
wodWebServer.NET <= 1.3.3 Directory Traversal Vulnerability - Active Check
A directory traversal vulnerability in wodWebServer.NET can be exploited to read files outside of the web root. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FengOffice 1.7.4 Shell Upload
------------------------------------------------------------------------ Software................FengOffice 1.7.4 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.fengoffice.com Vendor Contact Date.....3/11/2011 Disclosure...
Spacenuke v3.2.5 => Persistent XSS Exploiable Vulnerability
Exploit for php platform in category web applications Spacenuke v3.2.5 = Persistent XSS Exploiable Vulnerability ----------------------------------------------------------- I MEMBER FROM IN3CT0R TEAM. 1337 DAY .. My + Author : KnocKout Contact : email protected E-Mail : email protected HomePage :...
VLC Vulnerabilities handling .AMV and .NSV files
Core Security Technologies - Corelabs Advisory VLC Vulnerabilities handling .AMV and .NSV files 1. Advisory Information Title: VLC Vulnerabilities handling .AMV and .NSV files Advisory ID: CORE-2011-0208 Advisory URL: http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files Date...
NSOADV-2011-003: Majordomo2 'help' Command Directory Traversal (Patch Bypass)
-------------------------- NSOADV-2011-003 --------------------------- Majordomo2 'help' Command Directory Traversal Patch Bypass 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1...
FreeBSD : asterisk -- Exploitable Stack and Heap Array Overflows (65d16342-3ec8-11e0-9df7-001c42d23634)
The Asterisk Development Team reports : The releases of Asterisk 1.4.39.2, 1.6.1.22, 1.6.2.16.2, and 1.8.2.4 resolve an issue that when decoding UDPTL packets, multiple heap based arrays can be made to overflow by specially crafted packets. Systems configured for T.38 pass through or termination...
kernel: possible kernel oops from user MSS
The dotcpsetsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCPMAXSEG aka MSS values, which allows local users to cause a denial of service OOPS via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect u...
Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection
Exploit for php platform in category web applications + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor: http://www.woltlab.com/de/ + Vulnerability hilfsmittel.php?action=read&katid= + Exploitab...
Woltlab Burning Board 2.3.6 Addon - hilfsmittel.php SQL Injection
Woltlab Burning Board 2.3.6 Addon - hilfsmittel.php SQL Injection Woltlab Burning Board 2.3.6 Addon hilfsmittel.php SQL Injection Vulnerability + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor:...
Majordomo2 - SMTPHTTP Directory Traversal
Majordomo2 - SMTPHTTP Directory Traversal Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google...
Majordomo2 - Directory Traversal (SMTP/HTTP)
Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Special thanks to Dave Miller, Reed Loden and the rest...