OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

Link Logger syslogd DoS

Crash on syslog traffic flood...

Link Logger syslogd resource overwhelm DoS

Remote: yes Credit: Mike Cyr, aka h00die Vulnerable: 2.4.10.15 ddwrt version but more than likely all versions Discussion: Link Logger is a program for logging, analysis and reporting of router traffic so you can easily spot attacks and abuses on your network. By sending a ton of spoofed traffic,...

Article Directory SQL Injection

/ | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team Researcher /- Your Article Directory = multiple vulnerabilities /- site : http://www.yourarticlesdirectory.com /- Demo : http://www.ezynearticles.com/designs/demo/yad-admin /- Greetz : all my friends /-...

[SECURITY] [DSA 1757-1] New auth2db packages fix SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1757-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 30, 2009 http://www.debian.org/security/faq -...

Debian DSA-1757-1 : auth2db - SQL injection

It was discovered that auth2db, an IDS logger, log viewer and alert generator, is prone to a SQL injection vulnerability, when used with multibyte character encodings. The oldstable distribution etch doesn't contain auth2db. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

Keystroke Logger

Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...

Keystroke Logger

Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...

Keystroke Logger

Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...

Keystroke Logger

Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...

Microsoft Windows Image Acquisition Logger ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31069 CNCAN ID：CNCAN-2008090905 Microsoft Windows Image Acquisition是一款用于数码相机和扫描仪之类的影像设备的服务。 Microsoft Windows Image Acquisition Logger ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统任意文件。 相关的ActiveX控件的CLSID为A1E75357-881A-419E-83E2-BB16DB197C68，由于对Save方法缺少充分检查，可导致以应用程序权限覆盖系统任意文件。 Microsoft...

CVE-2008-3957

CVE-2008-3957 involves the Microsoft Windows Image Acquisition Logger ActiveX control. The vulnerability allows remote attackers to force the download of arbitrary files onto a client system by supplying a URL in the first argument to Open, combined with a full destination pathname in the first a...

CVE-2008-3957: Improper Input Validation

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (2)

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite 2 source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controll...

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (1)

source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input. ...

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (1)

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite 1 source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controll...

CVE-2008-2854: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSpreloc parameter to 1 modules/core/logger/init.php and 2 AJAX/newscat.php...

Directory traversal

Multiple directory traversal vulnerabilities in Project-Based Calendaring System PBCS 0.7.1-1 allow remote attackers to read arbitrary files via a .. dot dot in the filename parameter to 1 src/yopysync.php and 2 system-logger/printlogs.php...

CVE-2008-2215: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Project-Based Calendaring System PBCS 0.7.1-1 allow remote attackers to read arbitrary files via a .. dot dot in the filename parameter to 1 src/yopysync.php and 2 system-logger/printlogs.php...

Novell eDirectory unauthenticated access to SOAP interface

= Affected software : Editor : Novell Name : eDirectory Version : 8.7.x see note and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3866911&sliceId=1 https://vulners.com/cve/CVE-2008-0926 = Technical details : A SO...