CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

kernel: inotify memory leak

Memory leak in the inotifyinit1 function in fs/notify/inotify/inotifyuser.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory consumption via vectors involving failed attempts to create files...

GNU glibc 2.12.2 - fnmatch() Stack Corruption

GNU glibc 2.12.2 - fnmatch Stack Corruption / source: https://www.securityfocus.com/bid/46563/info GNU glibc is prone to a stack-corruption vulnerability. An attacker can exploit this issue to execute arbitrary machine code in the context of the application that uses the affected library. Failed...

Spacewalk: Prone to brute force password guessing attacks

Red Hat Network RHN Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks...

Spore's Failgonism

We were so excited about the release of Spore. Imagine: MMORPG that combined StarCraft-like interplanetary species competition with the principles of Darwinian evolution. Just cool! Too bad the actual game sucked so bad that barely anyone wanted to play it. Still, with the hundreds of millions of...

SuSE 11 / 11.1 Security Update : Samba (SAT Patch Numbers 3099 / 3100)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code. CVE-2010-3069 Additionally the update also contains fixes for the following non-security issues : - Failed to join ADS Domain. bnc567013 - Samba 3.0 / 3.2 doesn't work...

MemHT Portal 4.0.1 Cross Site Scripting

!/usr/bin/perl MemHT Portal 4.0.1 Persistent Cross Site Scripting Vulnerability user agent by ZonTa - zontahackersatgmaildotcom After successful inject wait for the admin to view statistic page. Fix is available : http://www.memht.com/news149MemHT-Portal-4-0-2.html use Getopt::Std; use...

RoSPORA 1.5.0 - Remote PHP Code Injection

'; 671. $link=$SERVER'PHPSELF'."?f=".$flag."&s="; 672. 673. if !empty$plarray 674. 675. usort$plarray, createfunction'$a, $b', 'if $a'.$sort.' == $b'.$sort.' return 0; if $a'.$sort.' '.$sorttype.' $b'.$sort.' return -1; return 1;'; 676. Input parameter passed through $GET's' isn't properly...

DEBIAN-CVE-2010-3492

The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to condu...

Database TDS Failed Login Detection (deprecated)

Binary data 5645.prm...

Database Failed Login Detection

Binary data 7037.pasl...

MySQL Server Failed Login Detection

Binary data 5633.prm...

CVE-2010-2968

The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

Apache Tomcat < 6.0.18 UTF8 Directory Traversal Vulnerability

No description provided by source. /Apache Tomcat 6.0.18 UTF8 Directory Traversal Vulnerability get /etc/passwd Exploit c0d3r: mywisdom thanks for not being lame to change exploit author tis is one of my linux w0rm module for user enumerations, i've dual os worm thanks to:...

BS Auction - SQL Injection

----------------------------Information------------------------------------------------ +Name : BS Auction = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auction +Price : $24.95 +Language :PHP +Exploit Language : ruby +Discovered by Ea...

2daybiz Freelance Script SQL Injection

Demo for the Exploit-DB Admin : http://www.2daybiz.com/products/freelancer/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Freelance Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

TeamSpeak 3.0.0-beta25 - Multiple Vulnerabilities

Luigi Auriemma Application: TeamSpeak 3 http://www.teamspeak.com Versions: = 3.0.0-beta23 2.x not affected Platforms: Windows, Mac OS X and Linux Bugs: A execution of various admin commands B various failed assertions C various NULL pointer dereferences Exploitation: remote, versus server Date: 1...

TeamSpeak 3.0.0-beta25 - Multiple Vulnerabilities

TeamSpeak 3.0.0-beta25 - Multiple Vulnerabilities Luigi Auriemma Application: TeamSpeak 3 http://www.teamspeak.com Versions: = 3.0.0-beta23 2.x not affected Platforms: Windows, Mac OS X and Linux Bugs: A execution of various admin commands B various failed assertions C various NULL pointer...

DMSEasy 0.9.7 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/FCKeditor/editor/filemanager/upload/php/upload.php', ContentType =...

Require user to answer CAPTCHA after three failed attempts

Require user to answer CAPTCHA after three failed attempts. For SOAP and XMLRPC this means that the user will have to open a browser to answer the CAPTCHA, similar to how google does it. This issue has been rated MODERATE. Please refer to http://confluence.atlassian.com/x/ZILmD for details on oth...