CVE-2008-5090

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...

Code injection

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...

CVE-2008-5090

The CVE-2008-5090 entry affects Electron Inc. Advanced Electron Forum versions prior to 1.0.7. The vulnerability arises when PHP code embedded in bbcode within the email parameter is processed by preg_replace with the eval switch, allowing remote attackers to execute arbitrary PHP code. This desc...

CVE-2008-5090

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...

Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database SQL Injection in SYS.DBMSCDCIPUBLISH.ALTERHOTLOGINTERNALCSOURCE November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

Team SHATTER Security Advisory: Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager November 12, 2008 Risk Level: High Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

Team SHATTER Security Advisory: Oracle Database Multiple SQL Injection vulnerabilities in LTADM

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database Multiple SQL Injection vulnerabilities in LTADM November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes Authentication...

Dropbear SSH Server svr_ses.childpidsize Remote Overflow

According to its banner, the remote host is runnning a version of Dropbear SSH before 0.47. Such versions contain a buffer allocation error that may allow an authenticated user to gain elevated privileges. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34769;...

ezcms-xss.txt

--------------------------------------------------------- Portal Name: Ez Cms Vendor : http://scriptsez.net Vulnerable File : index.php Dork: Powered by Scriptsez Inc Author : PouyaServer , [email protected] Vulnerability : XSS Cross site scripting...

Anti-Keylogger Elite 3.3.0 (AKEProtect.sys) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ======================================================================== Anti-Keylogger Elite 3.3.0 AKEProtect.sys Privilege Escalation Exploit ========================================================================...

Anti-Keylogger Elite 3.3.0 (AKEProtect.sys) Privilege Escalation Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ISecSoft, Inc. - http://www.remove-keyloggers.com | // // | | // // | Affecte...

Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ISecSoft, Inc. - http://www.remove-keyloggers.com | // // | | // // | Affected Software: | // // | Anti-Keylogge...

Anti-Keylogger Elite 3.3.0 - AKEProtect.sys Local Privilege Escalation

Anti-Keylogger Elite 3.3.0 - AKEProtect.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ISecSoft, Inc. -...

Debian Security Advisory DSA 1652-1 (ruby1.9)

The remote host is missing an update to ruby1.9 announced via advisory DSA 1652-1. OpenVAS Vulnerability Test $Id: deb16521.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1652-1 ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1649-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 1649-1. OpenVAS Vulnerability Test $Id: deb16491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1649-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

AIX 530006 : U821171

The remote host is missing AIX PTF U821171 which is related to the security of the package devices.fcp.tape.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

mw6aztec-insecure.txt

Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1...

mw6pdf417-insecure.txt

Test Exploit page targetFile = "C:\WINDOWS\system32\MW6PDF417.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "MW6PDF417Lib.PDF417" argCount = 1...

libspf2 DNS TXT record parsing buffer overflow

Overview libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. Description libspf2 is a widely-deployed implementation of the Sender Policy Framework. According to RFC 4408: An SPF record is a DNS Resource Record RR that declares which hosts are, and are not,...

MW6 Aztec ActiveX (Aztec.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ============================================================ MW6 Aztec ActiveX Aztec.dll Remote Insecure Method Exploit ============================================================ Test Exploit page targetFile =...