OwnRS Blog 1.2 SQL Injection

OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe,...

Linux kernel ext[234] directory corruption denial of service

The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service temporar...

OwnRS Blog 1.2 (autor.php) SQL Injection Vulnerability

No description provided by source. OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greetz...

OwnRS Blog 1.2 - autor.php SQL Injection

OwnRS Blog 1.2 - autor.php SQL Injection OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greet...

RHEL 5 : kernel (RHSA-2009:0225)

Updated kernel packages that fix three security issues, address several hundred bugs and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the third regular update. This update has been rated as having importa...

Unfixed XSS vulnerability at i-net-hosting.com

Security researcher Xylitol, has submitted on 20/01/2009 a cross-site-scripting XSS vulnerability affecting i-net-hosting.com, which at the time of submission ranked 1216255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It is...

Mandrake Security Advisory MDVSA-2009:016 (xen)

The remote host is missing an update to xen announced via advisory MDVSA-2009:016. OpenVAS Vulnerability Test $Id: mdksa2009016.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:016 xen Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Advisory: Oracle EBusiness Suite Sensitive Information Disclosure Vulnerability

Version Affected: Oracle E-Business Suite Release 12, version 12.0.6 Oracle E-Business Suite Release 11i, version 11.5.10.2 CVE: 2008-5446 Description: The oracle E Business including applications like I-Recruitment etc is vulnerable to flaw which leads to sensitive information disclosure about t...

CVE-2008-5848

The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and 1 monitor or 2 control the module's Modbus/TCP I/O activity...

CVE-2008-5848

The CVE-2008-5848 entry concerns the Advantech ADAM-6000 module which ships with a default password of 00000000. This default credential enables remote attackers to gain access via an HTTP session and, from there, monitor or control the module’s Modbus/TCP I/O activity. The connected sources conf...

Unfixed XSS vulnerability at www.moehlin.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.moehlin.ch, which at the time of submission ranked 4252329 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is...

Unfixed XSS vulnerability at www.blumerio.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.blumerio.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is currently...

Fixed XSS vulnerability at www.motcom-com.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.motcom-com.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is current...

Unfixed XSS vulnerability at www.gewerbeverein-rheinfelden.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.gewerbeverein-rheinfelden.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010...

Unfixed XSS vulnerability at www.ihro.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.ihro.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2009. It is currently...

Unfixed XSS vulnerability at www.emc-testcenter.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.emc-testcenter.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...

Unfixed XSS vulnerability at www.tcwattwil.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.tcwattwil.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is currentl...

Unfixed XSS vulnerability at www.lecentral.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.lecentral.ch, which at the time of submission ranked 23976098 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is...

Code injection

libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SGIO requests, which allows local users to cause a denial of service Programmed I/O mode on drives via multiple simultaneous invocations of an unspecified test program...

CVE-2008-5700

libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SGIO requests, which allows local users to cause a denial of service Programmed I/O mode on drives via multiple simultaneous invocations of an unspecified test program...