Sql injection

SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter...

CVE-2009-3750: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter...

CVE-2009-2681: Undefined Security Weakness

Unspecified vulnerability in HP ProCurve Identity Driven Manager IDM A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors...

HP ProCurve Identity Driven Manager (IDM)未明特权提升漏洞

Bugraq ID: 36462 CVE ID：CVE-2009-2681 HP ProCurve Identity Driven Manager是一款允许网管员动态分配用户及设备的网络链接及访问，以适应不同业务策略。 在运行IAS的Microsoft Windows 2003和Windows 2008系统平台运行HP ProCurve Identity Driven Manager存在未明错误。 本地攻击者可以利用此漏洞提升特权。 HP ProCurve Identity Driven Manager IDM A.03.00 HP ProCurve Identity Driven...

HP Procurve IDM privilege escalation

No description provided...

[security bulletin] HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager (IDM) Running on Microsoft IAS or NPS, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01798159 Version: 1 HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager IDM Running on Microsoft IAS or NPS, Local Unauthorized Access NOTICE: The information in this Security...

httpdx <= 0.5b FTP Server (CWD) Remote BOF Exploit (SEH)

Exploit for windows platform in category remote exploits ======================================================== httpdx " %sys.argv0 sys.exit0 skape's egghunter shellcode shellunt= "\x66\x81\xca\xff\x0f\x42\x52\x6a\x02\x58\xcd\x2e\x3c\x05\x5a\x74"...

Sun IDM Arbitrary Commands Execution Vulnerability

1 Summary Affected Software: Sun IDM 7.1, 8.0 Vendor URL: http://www.sun.com/ Severity: Medium 2 Description Sun Identity Manager facilitates centralized identity provisioning for variety of application and platforms. Its web interface allows end users to request password change. To handle such...

Sun IDM Arbitrary Command Execution

1 Summary Affected Software: Sun IDM 7.1, 8.0 Vendor URL: http://www.sun.com/ Severity: Medium 2 Description Sun Identity Manager facilitates centralized identity provisioning for variety of application and platforms. Its web interface allows end users to request password change. To handle such...

SDP Downloader 2.3.0 Buffer Overflow

usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloader v2.3.0 .ASX Local Buffer Overflow Exploit SEH\n" print...

SDP Downloader 2.3.0 (.ASX) Local Buffer Overflow Exploit (SEH)

No description provided by source. usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloader v2.3.0 .ASX Local...

SDP Downloader 2.3.0 (.ASX) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits =============================================================== SDP Downloader 2.3.0 .ASX Local Buffer Overflow Exploit SEH =============================================================== usage: exploit.py xNote: In this case we have the...

SDP Downloader 2.3.0 - .asx Local Buffer Overflow (SEH) (1)

SDP Downloader 2.3.0 - .asx Local Buffer Overflow SEH 1 usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloade...

CVE-2009-1076

CVE-2009-1076 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The end-user login flow based on a question, when used with IDMROOT/questionLogin.jsp?accountId=USER, reveals different responses depending on whether USER exists. This behavior enables remote attackers to enumerate val...

CVE-2009-1080

CVE-2009-1080 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (Bug ID 19033). Affected component: IdM web interfac...

CVE-2009-1082

Sun Java System Identity Manager (IdM) 7.0–8.0 is affected by a privilege-escalation issue where remote authenticated users can submit crafted commands to the Admin Console to gain administrative privileges (e.g., account creation) via the saveNoValidate and related saveNoValidateAllowedFormsAndW...

CVE-2009-1077

The CVE-2009-1077 entry concerns Sun Java System Identity Manager (IdM) 7.0–8.0. The admin Change My Password functionality fails to enforce the RequiresChallenge setting, enabling remote authenticated users to change other users’ passwords, demonstrated by altering the administrator account. Doc...

CVE-2009-1081

CVE-2009-1081 affects Sun Java System Identity Manager (IdM) 7.0–8.0. The issue is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (Bug IDs 19595 and 19661). The connected documents do not provide concrete exploi...

CVE-2009-1074

CVE-2009-1074 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The issue is that SSL is not used in all expected circumstances, enabling remote attackers to potentially obtain sensitive information by sniffing network traffic. The description notes related factors such as lack of s...

CVE-2009-1083: Improper Control of Generation of Code

Sun Java System Identity Manager IdM 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."...