CVE-2007-5934

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2...

Oracle - Indirect Privilege Escalation and Defeating Virtual Private Databases

Hey all, For anyone that's interested I've just put out two papers chapters really; one on Indirect Privilege Escalation in Oracle and the other on Defeating Virtual Private Databases in Oracle. You can grab them here. http://www.databasesecurity.com/dbsec/ohh-indirect-privilege-escalation.pdf...

Hacking basics series of on the web Trojan review-vulnerability warning-the black bar safety net

A total T Web Trojans has been the domestic network of popular things. The state notes that according to friends, this kind of thing in a foreign country is not popular.） The reason the more popular of the Golden State think of the following reasons: 1. Web Trojans in a variety of network threats...

PunBB 1.2.11 Cross site scripting

/ --------------------------------------------------------------- Neo Security Team NST® Advisory 22 --------------------------------------------------------------- Program : PunBB 1.2.11 Homepage: http://www.punbb.org Vulnerable Versions: PunBB 1.2.11 & lower ones Risk: Low! Impact: Indirect cro...

mod_python imported modules inderect calls

It's possible to inderectly call unsafe function via imported module...

[RHSA-2002:070-06] Updated mod_python packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated modpython packages available Advisory ID: RHSA-2002:070-06 Issue date: 2002-04-22 Updated on: 2002-05-02 Product: Red Hat Linux Keywords: modpython publisher imported...

PT-2011-5230 · Vmware +5 · Libvmtools-Devel +20

Name of the Vulnerable Software and Affected Versions: openSUSE versions prior to the fixed version Linux kernel versions through 3.8.4 systemtap versions affected versions not specified systemtap-runtime versions affected versions not specified systemtap-runtime-debuginfo versions affected...