CVE-2005-2799

creationtimestamp| type| source ---|---|--- 2010-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16854 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksyswrt54glapplyexec.rb 2018-05-29 15:50:33+00:00|...

[SECURITY] Fedora 14 Update: sudo-1.7.4p4-1.fc14

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...

MailEnable SMTP server DoS conditions

Uninitialized memory reference during logging on MAIL FROM / RCPT TO commands...

Fedora Update for sudo FEDORA-2010-14355

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2010-14355 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 13 Update: sudo-1.7.4p4-1.fc13

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...

httpdx - 'tolog()' Format String (Metasploit) (1)

$Id: httpdxtologformat.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

httpdx - 'tolog()' Format String (Metasploit) (2)

$Id: httpdxtologformat.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apache HTTP Server auth_ldap Logging Function Format String (CVE-2005-3656; CVE-2006-0150)

There exists a format string vulnerability in the authldap module used with Apache HTTP server. The vulnerability is a result of the failure to properly verify string arguments passed to a logging function, resulting in a memory corruption condition. A remote attacker can exploit this vulnerabili...

CVE-2010-3022

Cross-site scripting XSS vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 for Drupal allows remote authenticated users, with add url aliases and report access permissions, to inject arbitrary web script or HTML via crafted node paths i...

CVE-2010-3022

CVE-2010-3022 is a cross-site scripting (XSS) vulnerability in the Drupal Devel module's Performance logging component. Affected versions are Drupal Devel module 5.x prior to 5.x-1.3 and 6.x prior to 6.x-1.21. The issue allows remote authenticated users, granted add url aliases and report access ...

CVE-2010-1799

Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

Stack overflow

Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

QuickTime < 7.6.7 QuickTimeStreaming.qtx SMIL File Debug Logging Overflow (Windows) (deprecated)

Binary data 5628.prm...

QuickTime < 7.6.7 QuickTimeStreaming.qtx SMIL File Debug Logging Overflow (Windows)

Versions of QuickTime earlier than 7.6.7 are potentially affected by a stack overflow in the application's error logging when debug logging is enabled. If an attacker can trick a user on the host into viewing a specially crafted movie file, he may be able to cause an application crash or even...

SA-CONTRIB-2010-079 - Devel (Performance logging) - Cross Site Scripting

The devel project is a suite of modules for developers and themers. Within the devel project, there is the performance logging module. The module does not escape URLs comprised of node paths, leading to a Cross Site Scripting XSS vulnerability. Users with the permission to access the reports that...

MDVA-2010:005 : msec

This update fixes two issues with msec: - some error messages could result in msec trowing an exception instead of logging the corresponding text bug 56180 - security report about group-writable files belonging to gdm user was silenced by default bug 56064 %NASLMINLEVEL 70300 @DEPRECATED@ This...

MIT Kerberos V5 KAdminD klog_vsyslog Server Stack Buffer Overflow (CVE-2007-0957)

Kerberos is a protocol suite which allows for the negotiation of authenticated, and optionally encrypted, communication between two points on a network. MIT Kerberos V5 is an implementation of this protocol suite. There exists a buffer overflow vulnerability in MIT Kerberos. The vulnerability is...

Joomla com_ambra Persistent Xss Vulnerability

Exploit for php platform in category web applications ============================================= Joomla comambra Persistent Xss Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

PHP Proxy Server by Dr.Z3r0

Не знаю достойно ли это раздела релизы. Но запощу для его наполнения. PHP Proxy Server v1.1 Вообщем вот проксик написал. Писал для себя скажем так для развития. Интересовала библиотека socket. Вот собственно из этого и получился прокси серв. Возможности эт собственно сам прокси сервер,...

Fedora 12 : spamass-milter-0.3.1-18.fc12 (2010-5096)

This update includes a fix for a problem where if the milter is running using the '-x' option to expand aliases before passing inbound mail through SpamAssassin, a malicious client using a carefully-crafted SMTP session could execute arbitrary code on the mail server. The fix avoids the use of a...