1045 matches found
CVE-2009-4018
CVE-2009-4018 affects PHP before 5.2.11 and 5.3.x before 5.3.1, where proc_open in ext/standard/proc_open.c fails to enforce safe_mode_allowed_env_vars and safe_mode_protected_env_vars. This lets context-dependent attackers supply an arbitrary environment via the env parameter, demonstrated by cr...
openSUSE Security Update : kernel (kernel-270)
This patch updates the openSUSE 11.0 kernel to the 2.6.25.18 stable release. It also includes bugfixes and security fixes : CVE-2008-4410: The vmiwriteldtentry function in arch/x86/kernel/vmi32.c in the Virtual Machine Interface VMI in the Linux kernel 2.6.26.5 invokes writeidtentry where...
Almnzm (COOKIE: customer) Remote SQL Injection Vulnerability
No description provided by source. ? printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ ---Script Almnzm SQL INJECTION /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ ---"Powered by Almnzm" /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ ---admin cookie create |QQQQ/ By Qabandi \QQQQ| ---Add PhP Ext |QQQQ| |QQQQ|...
eggBlog <= 4.1.1 Local Directory Transversal Exploit
Exploit for unknown platform in category web applications ==================================================== eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imageli...
Debian Security Advisory DSA 1775-1 (php-json-ext)
The remote host is missing an update to php-json-ext announced via advisory DSA 1775-1. OpenVAS Vulnerability Test $Id: deb17751.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1775-1 php-json-ext Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Debian: Security Advisory (DSA-1775-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1775-1 : php-json-ext - denial of service
It was discovered that php-json-ext, a JSON serialiser for PHP, is prone to a denial of service attack, when receiving a malformed string via the jsondecode function. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
[SECURITY] [DSA 1775-1] New php-json-ext packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1775-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 20, 2009 http://www.debian.org/security/faq -...
php security update
5.1.6-23.2.el5 - ext/gd: fix overflow2 usage for CVE-2007-3996, CVE-2008-3658 5.1.6-23.1.el5 - add security fixes for CVE-2008-3658, CVE-2008-3660, CVE-2008-5498, CVE-2008-5557, CVE-2008-5814, and mbstring funcoverload issue 487369...
kernel security and bug fix update
2.6.18-128.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...
Media Commands Heap Overflow
!usr/bin/perl Discovered & Coded by : Hakxer Media Commands M3U,M3l,TXT,LRC Files Crash PoC Greetz : Allah , ProViDoR , Egyptian x Hacker Team : Egy coders Team Download/http://www.mediacommands.com/download.html Description : Import Hakxer.Ext Into program ... Program Get Crashed ; my...
RHEL 4 : kernel (RHSA-2008:0972)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0972 advisory. - kernel PWC driver DoS CVE-2007-5093 - kernel: dio: zero struct dio with kzalloc instead of manually CVE-2007-6716 - kernel: ptrace: Paddin...
AIX 530006 : U814236
The remote host is missing AIX PTF U814236 which is related to the security of the package X11.samples.ext You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
DEBIAN-CVE-2007-6683
The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...
CVE-2007-6683
The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 2102)
the CURL module lacked checks for control characters CVE-2006-2563 - strrepeat contained an integer overflow - ext/wddx contained a buffer overflow - memorylimit lacked checks for integer overflows - a bug in sscanf could potentially be exploited to execute arbitrary code. CVE-2006-4020 - an...
PHP EXT/Session HTTP应答头注入漏洞
PHP是一款广泛使用的WEB开发脚本语言。 PHP的ext/session在置于会话COOKIE前没有URL编码会话ID，远程攻击者可以利用漏洞可以对会话COOKIE进行注入攻击。 当PHP' ext/session调用sessionstart，会在部分情况下发送新会话COOKIE，这些情况如下： - session id嵌入到PATHINFO - session id重生成 - session id通过sessionid设置 - sessionstart多次调用...
ext10-lfi.txt
ext 1.0 alpha1 feed-proxy.php Remote File Disclosure D.Script: http://yui-ext.com/deploy/ext-1.0-alpha1.zip Discovered by: Alkomandoz Hacker Homepage: http://www.asb-may.net - mohandko.com - sniper-sa.com - tryag.com V.Code In /examples/layout/feed-proxy.php...
ext 1.0 alpha1 (feed-proxy.php) Remote File Disclosure
ext 1.0 alpha1 feed-proxy.php Remote File Disclosure D.Script: http://yui-ext.com/deploy/ext-1.0-alpha1.zip Discovered by: Alkomandoz Hacker Homepage: http://www.asb-may.net - mohandko.com - sniper-sa.com - tryag.com V.Code In /examples/layout/feed-proxy.php...
CVE-2007-2285
Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 Ext JS allows remote attackers to read arbitrary files via a .. dot dot in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent...