9981 matches found
kernel: SELinux and mmap_min_addr
The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to 1 the default configuration of the allowunconfinedmmapl...
Cross-Site Scripting vulnerability in Joostina
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Joostina CMS. Данная уязвимость подобна XSS уязвимости, которую я в 2007 году нашёл в Joomla 1.0.x. Но в отличии от Joomla, в Joostina нет ограничения на количество символов в строке поиска. Что позволяет...
Workflow permission to limit ability to link issues
We need to be able to limit the ability to link issues by the issue status. If we have two issues, and they are both closed, I do not want to be able to link them. If one or both are opened or in progress, I'd like to be able to create the link from the open issue. We are trying to use Jira for...
CVE-2009-3486
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...
Joomla Component MisterEstate Blind SQL Injection Exploit
No description provided by source. ?php echo 'h2Joomla Component MisterEstate Blind SQL Injection Exploit/h2'; // http://www.misterestate.com/ iniset "memorylimit", "512M" ; iniset "maxexecutiontime", 0 ; settimelimit 0 ; if !isset $GET'url' die 'Usage: '.$SERVER'SCRIPTNAME'.'?url=www.victim.com'...
Uploading large fonts for PDF export fails with XSRF error
When uploading souizhs.ttf font that we use due to its comprehensive UTF8 support, I'm getting XSRF validation error: quote Your request could not be processed because a required security token was not present in the request. You may need to re-submit the form or reload the page. quote I tried...
Breakthrough class to intercept the upload limit-vulnerability warning-the black bar safety net
by:Prius special In our invasion of the site,sometimes submitted to our Malaysian or other ASP file,will be first-class information surveillance system The intercept,this is because it set a limit to submit a character,since it does not allow us to submit,that we can use the download method. This...
Zen Cart 1.3.8 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...
cscope security update
15.5-10.RHEL4.3 - Merge incdir-overflow and snprintf patches for better readability, snprintf is used now with PATHLEN limit without other adjustments, related strlen / %.s / len are no longer needed and were dropped - Update tempsec patch, drop extraneous snprintf argument to suppress compiler...
vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection
--==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin...
DDIVRT-2009-25 IPsession SQL Injection Vulnerability
Title ----- DDIVRT-2009-25 IPsession SQL Injection Vulnerability Severity -------- Medium Date Discovered --------------- March 31, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...
server limit dos use with the think-vulnerability warning-the black bar safety net
The emptiness of the prodigal son http://hi.baidu.com/aullik5/blog/item/6947261e7eaeaac0a7866913.html the. This article will not talk about this, I like to call it JS implantation method. | ---...
CVE-2008-6792
system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully condu...
Use GOOGLE Analyzer do server limit dos-vulnerability warning-the black bar safety net
This article is purely YY, and finally did not practice success, but does not exclude other sites have similar possible. Many sites are using google's statistics. When we from a website, A link to a google statistics Site B, google will record the referer URI, and stored into the B COOKIE. If we...
Mandriva Update for console-tools MDKA-2007:077 (console-tools)
Check for the Version of console-tools OpenVAS Vulnerability Test Mandriva Update for console-tools MDKA-2007:077 console-tools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...
PT-2009-3441 · Linux +2 · Linux +2
Name of the Vulnerable Software and Affected Versions: NovaStor NovaNET version 12 Description: The issue is related to a stack-based buffer overflow in the DtbClsLogin function, allowing remote attackers to execute arbitrary code on Linux platforms or cause a denial of service on Windows platfor...
osCommerce unprotected admin directory
This host is running osCommerce, a widely installed open source shopping e-commerce solution. See http://www.oscommerce.com for more information. The store admin directory on your server needs to be password protected using .htaccess. Most of the time the server you are hosting your store on has...
phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion
phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl...
xen: Multiple unsafe uses of guest-writable data from xenstore
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...