8906 matches found
CentOS 3 / 4 : curl (CESA-2010:0329)
Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
curl security update
CentOS Errata and Security Advisory CESA-2010:0329 Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...
RedHat Update for curl RHSA-2010:0273-05
Check for the Version of curl OpenVAS Vulnerability Test RedHat Update for curl RHSA-2010:0273-05 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Edimax AR-7084GA Router - Cross-Site Request Forgery Persistent Cross-Site Scripting
Edimax AR-7084GA Router - Cross-Site Request Forgery Persistent Cross-Site Scripting 25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1...
Edimax AR-7084GA Router - Cross-Site Request Forgery / Persistent Cross-Site Scripting
25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1" name="VIRTUALSVRform"...
curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback
contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service application crash or have unspecified othe...
Novell Netware FTP Remote Stack Overflow
No description provided by source. Application: Novell Netware FTP Remote Stack Overflow Platforms: Novell Netware 6.5 SP8 Exploitation: Remote Code Execution CVE Number: CVE-2010-0625 Novell TID: 3238588 Discover Date: 2009-07-23 Author: Francis Provencher Protek Research Lab's Blog:...
CVE-2010-0734
contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service application crash or have unspecified othe...
eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities
Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...
Debian DSA-1992-1 : chrony - several vulnerabilities
Several vulnerabilities have been discovered in chrony, a pair of programs which are used to maintain the accuracy of the system clock on a computer. This issues are similar to the NTP security flaw CVE-2009-3563. The Common Vulnerabilities and Exposures project identifies the following problems ...
On the php local includes-vulnerability warning-the black bar safety net
Would have thought it struck gold with a black brother after the Exchange found can only be applied to the Win32 platform, so this BUG might of the storm reduced, the basic not much harm, because in the WIN32 platform using PHP too. include $GETfile.”. php”; Previously we used a%0 0 to cut off, n...
To bypass the <? PHP exit('Access Denied'); ?> Limit-vulnerability warning-the black bar safety net
To bypass ? PHP exit’Access Denied’; ?& gt; limit ? php $shellcode=’PD9waHBpbmZvKCk7Pz4’;// base64decode ? phpinfo;?& gt; $endstr=’s’; $timestamp=$endstr.$ shellcode; fileputcontents"php://filter/write=convert.base64-decode/resource=ryat.php","? PHP exit’Access Denied’; ?& gt;\t$timestamp"; ?& gt...
DSA-1992-1 chrony - denial of service
Bulletin has no description...
daap-get-library NSE Script
Retrieves a list of music from a DAAP server. The list includes artist names and album and song titles. Output will be capped to 100 items if not otherwise specified in the daapitemlimit script argument. A daapitemlimit below zero outputs the complete contents of the DAAP library. Based on...
php security update
CentOS Errata and Security Advisory CESA-2010:0040 Updated php packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripti...
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...
CentOS 5 : kernel (CESA-2008:0612)
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
kmod, kvm security update
CentOS Errata and Security Advisory CESA-2009:1659 Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual...
Sunbird 0.9 Array Overrun
Sunbird 0.9 Array Overrun code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-199 Risk: High Remote: Yes Affected Software: - Sunbird 0.9 NOTE: Prior versions may also be affected. Original URL:...