5382 matches found
PHP Live Helper 2.0.1 - Multiple Vulnerabilities
GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result foreach $result as $key = $val $info$key = stripslashes$val;...
phplivehelper-sqlexec.txt
GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result foreach $result as $key = $val $info$key = stripslashes$val;...
PHP Live Helper <= 2.0.1 Multiple Vulnerabilities
GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper = 2.0.1 Risk : Multiple Vulnerabilities Description: PHP Live Helper is an online support system written in php that allows the visitors of a website to intera...
PHP Live Helper <= 2.0.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result...
Any combination of instructions to achieve free kill-vulnerability warning-the black bar safety net
Note:writing flower instructions,refer to the following pairs of instructions,can be arbitrary free combination. Free to killeffect. push ebp pop ebp push eax pop eax push esp pop esp push 0 push 0 push 1 0 -------which numbers can be arbitrary,note the following correspondence push -10...
Team SHATTER Security Advisory: SQL Injection in Oracle Application Server (WWEXP_API_ENGINE)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory SQL Injection in Oracle Application Server WWEXPAPIENGINE Audust 4, 2008 Risk Level: High Affected versions: Oracle Application Server 9.0.4.3, 10.1.2.2 and 10.1.4.1 Remote exploitable: Yes No authentication required...
n.runs-SA-2008.005 - Apple Inc. - CoreServices Framework’s CarbonCore Framework - Arbitrary Code Execution (remote)
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2008.005 01-Aug-2008 Vendor: Apple Inc., http://www.apple.com Affected Products: CoreServices Framework’s CarbonCore Framework Used by: i.e. Safari, Mail Affected Platforms: Mac OS X v10.4.11 Mac OS X Server v10.4.11 Mac OS X v10.5.4 M...
[Full-disclosure] n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote)
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2008.004 28-Jul-2008 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Divide by Zero - DoS remote Risk: HIGH Vendor communication: 2008-07-10 n.runs contacted AVG 2008-07-10 AVG response 2008-07-10 n.runs...
Slackware 10.2 / 11.0 / 12.0 / 12.1 / current : mozilla-thunderbird (SSA:2008-210-05)
New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-05. The te...
SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability
====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...
Oracle Java Runtime Environment (JRE) Detection
One or more instances of Oracle's formerly Sun's Java Runtime Environment JRE is installed on the remote host. This may include private JREs bundled with the Java Development Kit JDK. - Additional instances of Java may be discovered if thorough tests are enabled. C Tenable Network Security, Inc...
Debian Security Advisory DSA 1608-1 (mysql-dfsg-5.0)
The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1608-1. OpenVAS Vulnerability Test $Id: deb16081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1608-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...
SuSE 10 Security Update : clamav (ZYPP Patch Number 5416)
This update brings clamav to version 0.93.3. It lists CVE-2008-2713 as fixed, but this was fixed in 0.93.1 already, but not mentioned. The update contains stability and bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
[NETRAGARD SECURITY ADVISORY][Apple Core Image Fun House <= 2.0 OS X -- Arbitrary Code Execution][NETRAGARD-20080711]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NETRAGARD ADVISORY http://www.netragard.com "We make IT Safe" Advisory Summary - ---------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Researcher : Kevin Finisterre Advisory ID : NETRAGARD-2007062...
CVE-2008-2795
The CVE refers to IDM Computer Solutions UltraEdit 14.00b where the FTP/SFTP client is vulnerable to directory traversal via a LIST response, enabling a remote server to create or overwrite arbitrary files using .. or ..\ sequences. Root cause is improper handling of directory components in the L...
Sql injection
SQL injection vulnerability in inc/classsearch.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter...
Debian DSA-1594-1 : imlib2 - buffer overflows
Stefan Cornelius discovered two buffer overflows in Imlib's - a powerful image loading and rendering library - image loaders for PNM and XPM images, which may result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Securify bulletin: Microsoft Active Directory Denial-of-service
SECURIFY Bulletin: Active Directory Denial-of-service ===================================================== I. SUMMARY: SECURIFY has discovered a denial-of-service vulnerability in Microsoft Active Directory AD in which a domain user sending a specially-crafted LDAP request causes the Active...
CVE-2008-2687
CVE-2008-2687 affects ProManager 0.73. A directory traversal flaw in inc/config.php allows remote attackers to include and execute arbitrary local files by using a .. in the language parameter, enabling arbitrary code execution on affected systems. No remediation details are provided in the suppl...
Black Ice Software Inc Barcode SDK (BITiff.ocx) Remote BOF Exploit (2)
No description provided by source. Black Ice Software Inc Barcode SDK BITiff.ocx Remote Buffer Overflow url: http://www.blackice.com File : BITiff.ocx Ver. : 10.9.3.0 CLSID: 2324B5B7-D3EF-464C-BB35-06EFF8F11EB3 Mark.: RegKey Safe for Script: True RegKey Safe for Init: True...