mod_auth_mysql: character encoding SQL injection flaw

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...

overtheledger.txt

Hi; Affected versions: LedgerSMB 1.1.10 but see below, current is 1.1.11 SQL-Ledger 2.6.27 but see below. Current is 2.6.27 Effects: Arbitrary code execution both products and authentication bypass SQL-Ledger only. We have discovered yet another major security issue in both SQL-Ledger for affecte...

IBM Infoprint Remote Management Simple DoS

Overview ======== IBM makes a series of TCP/IP enabled printers that come with remote management features: http://www.printers.ibm.com/R5PSC.NSF/Web/wglaserselect One of these features is a Telnet-based remote management service, which has a DoS vulnerability. The vulnerability discussed here was...