PHP 5.2.1 - 'hash_update_file()' Freed Resource Usage

?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...

iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability

Horde Project Cleanup Script Arbitrary File Deletion Vulnerability iDefense Security Advisory 03.15.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 15, 2007 I. BACKGROUND The Horde Project provides a PHP-based framework, as well as applications for web-based group collaboration. IMP...

PHP 4 Userland ZVAL Reference Counter Overflow Exploit PoC

No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || // // | |/ || '|/ |/ -| ' / -/ |||| /| || / //...

Design/Logic Flaw

The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information memory contents by doing 1 text searches or 2 paste operations after pressing certain keyboard shortcut keys...

CVE-2007-0859

The CVE-2007-0859 issue affects Palm OS Treo smartphones. The Find feature remains accessible even when the system password is locked, enabling text searches and pasting data from the clipboard via keyboard shortcuts on the Emergency Call or Call In Progress screens. Root cause is a design flaw i...

CVE-2007-0859: Undefined Security Weakness

The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information memory contents by doing 1 text searches or 2 paste operations after pressing certain keyboard shortcut keys...

PalmOS Treo smartphones protection bypass

Find feature allows access to locked device...

security flaw

Race condition in the findgetblockslow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service infinite loop by mounting a crafted ISO9660 filesystem containing malformed data structures...

Derdirigent.txt

ToXiC Der dirigent: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: Derdirigent Source Code: http://www.der-dirigent.de/downloads/derdirigentv1.0.zip Page: insertline.php insertpage.php find.php fullscreen.php changecase.php insertlink.php...

CVE-2006-4940

login/forgotpassword.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information e-mail addresses and Moodle account names via a find action...

CVE-2006-4940

login/forgotpassword.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information e-mail addresses and Moodle account names via a find action...

Privilege escalation using addSelectionListener — Mozilla

Web content could access the nsISelectionPrivate interface of the Selection object and use it to add a SelectionListener. The listener would be called when the user did a "Find" on the page or a "select all", and as intended this shouldn't cause any problems. But as with escaping the PAC sandbox ...

CVE-2006-2279: Undefined Security Weakness

Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via 1 the Find parameter in a search.php, and the 2 LID and 3 Rate parameters in b misc.php...

Cross site scripting

Cross-site scripting XSS vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command...

CVE-2006-0247: Undefined Security Weakness

Cross-site scripting XSS vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command...

Design/Logic Flaw

Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...

CVE-2006-0191

Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...

CVE-2006-0191

Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...

CVE-2006-0191: Undefined Security Weakness

Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...

[SA18420] Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability

TITLE: Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18420 VERIFY ADVISORY: http://secunia.com/advisories/18420/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/ DESCRIPTION: ...