ASMAX AR 804 gu Web Management Console - Arbitrary Command Execution

ASMAX 804 gu router is a SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. There is an unauthenticated maintenance script named 'script' in /cgi-bin/ directory of the web management interface. 3. When 'system' paramether is passed to the script it allows running OS shell...

ASMAX AR 804 gu Web Management Console Arbitrary Command Exec

Exploit for hardware platform in category remote exploits ============================================================= ASMAX AR 804 gu Web Management Console Arbitrary Command Exec ============================================================= 1. ASMAX 804 gu router is a SOHO class device. It...

CVE-2009-1375

The PurpleCircBuffer implementation in Pidgin formerly Gaim before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service memory corruption and application crash via vectors involving the 1 XMPP or 2 Sametime protocol...

[SECURITY] Fedora 9 Update: chmsee-1.0.1-12.fc9

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

Fedora 10 : vnc-4.1.3-1.fc10 (2009-0991)

Update to 4.1.3 maintenance release which contains fix for CVE-2008-4770 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

MDVA-2008:176 : mdadm

mdadm would crash during bootup when trying to activate several raid10 devices, dropping the system in maintenance mode, where you had to manually reactivate the missing raid10 sets in order to continue the boot. The updated mdadm fixes this issue, allowing systems with raid10 to boot normally...

Mandriva Linux Security Advisory : postgresql (MDVSA-2008:004)

Index Functions Privilege Escalation CVE-2007-6600: as a unique feature, PostgreSQL allows users to create indexes on the results of user-defined functions, known as expression indexes. This provided two vulnerabilities to privilege escalation: 1 index functions were executed as the superuser and...

[SECURITY] Fedora 9 Update: chmsee-1.0.1-11.fc9

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

Cross-site scripting vulnerability in apricot.php from LovPop.net

Overview apricot.php from LovPop.net contains a cross-site scripting vulnerability. apricot.php from LovPop.net is a software to analyze web access logs. apricot.php contains a cross-site scripting vulnerability. Note that future releases and maintenance of apricot.php ended on March 19, 2009...

Fedora Core 9 FEDORA-2009-3428 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory FEDORA-2009-3428. OpenVAS Vulnerability Test $Id: fcore20093428.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3428 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009...

IBM BladeCenter Advanced Management Module Multiple vulnerabilities

Louhi Networks Information Security Research Security Advisory Advisory: IBM BladeCenter Advanced Management Module Multiple vulnerabilities XSS type 2 & 1, CSRF, Information Disclosure Release Date: 2009-04-09 Last Modified: 2009-04-09 Authors: Henri Lindberg [email protected], CISA Device...

ECShop shop system<=V2. 6. 2 the background to get webshell-vulnerability warning-the black bar safety net

ECSHOP is an open source free online store system. By the professional development team upgrade and maintenance, to provide you with timely and efficient technical support, you can also according to their own business characteristics of ECSHOP be customized to increase their own store features...

Debian DSA-1756-1 : xulrunner - multiple vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1169 Security researcher Guido Landi discovered that a X...

DSA-1756-1 xulrunner - multiple vulnerabilities

Bulletin has no description...

PHP. ini way anti-injection or hung it-vulnerability warning-the black bar safety net

Originally this two-day study phpIDS, using the file: when you want to prevent the page attack, in the pages of the head of the include attack prevention file, just like General anti-injected into the file. We can use three cases to do that: 1, in each of the files within the references. Such a...

[SECURITY] [DSA 1753-1] End-of-life announcement for Iceweasel in oldstable

------------------------------------------------------------------------ Debian Security Advisory DSA-1753-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 24, 2009 http://www.debian.org/security/faq -...

[SECURITY] Fedora 9 Update: chmsee-1.0.1-9.fc9

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

[SECURITY] Fedora 9 Update: cairo-dock-1.6.3.1-1.fc9.3

An light eye-candy fully themable animated dock for any Linux desktop. It has a family-likeness with OSX dock, but with more options...

[SECURITY] Fedora 9 Update: chmsee-1.0.1-8.fc9

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

NewsCMSlite Insecure Cookie Handling

www.BugReport.ir AmnPardaz Security Research Team Title: NewsCMSlite Vendor: http://www.katywhitton.com Bug: Insecure Cookie Handling Exploitation: Remote with browser Fix: N/A Original Advisory: http://www.bugreport.ir/index62.htm - Description: NewsCMSlite is an easy way to get regularly update...