7798 matches found
CentOS 5 : kernel (CESA-2009:1670)
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
I-Escorts Directory (country_escorts.php country_id) SQL Injection
Exploit for unknown platform in category web applications ================================================================================ I-Escorts Directory countryescorts.php countryid SQL Injection Vulnerability ================================================================================...
I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection
? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err0r C0N50L3:...
I-RATER Basic - Arbitrary File Upload
I-RATER Basic - Arbitrary File Upload ======================================================================================== | Title : I-RATER Basic Shell Upload Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
I-RATER Basic Shell Upload Vulnerability
Exploit for unknown platform in category web applications ======================================== I-RATER Basic Shell Upload Vulnerability ======================================== ======================================================================================== | Title : I-RATER Basic She...
I-Escorts Directory SQL Injection
? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err0r C0N50L3:...
I-Escorts Directory - country_escorts.php?country_id SQL Injection
I-Escorts Directory - countryescorts.php?countryid SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err...
I-RATER Basic - Arbitrary File Upload
======================================================================================== | Title : I-RATER Basic Shell Upload Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...
kernel: SELinux and mmap_min_addr
The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to 1 the default configuration of the allowunconfinedmmapl...
CVE-2009-3939
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
CVE-2009-3939
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
CVE-2009-3939
CVE-2009-3939 affects the Linux kernel megaraid_sas driver: the poll_mode_io file has world-writable permissions in kernel 2.6.31.6 and earlier. This enables local users to change the driver I/O mode by modifying the file. The description notes local access and manipulation of driver behavior, wi...
CVE-2009-3939
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
IBM AIX 'rpc.cmsd'日历守护进程远程栈缓冲区溢出漏洞
Bugraq ID: 36615 IBM AIX是一款商业性质的操作系统。 IBM AIX rpc.cmsd存在缓冲区溢出问题，远程攻击者可以利用漏洞以root进程权限执行任意指令。 处理远程过程21的请求时存在漏洞，此函数接收两个参数，都为XDR字符串，当拷贝第一个参数到基于栈的缓冲区时，代码没有正确校验它的长度，可触发基于栈的缓冲区溢出。要利用此漏洞，攻击者需要通过RCP连接目标主机，不需要验证通过。 IBM Virtual I/O Server VIOS 2.1 IBM Virtual I/O Server VIOS 1.5.2 IBM Virtual I/O Server VIO...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...
Sql injection
SQL injection vulnerability in viewmag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the magid parameter, a different vector than CVE-2008-4465...
CVE-2009-3495
SQL injection vulnerability in viewmag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the magid parameter, a different vector than CVE-2008-4465...
CVE-2009-3505
SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...