(mod_dav_svn): DoS (NULL ptr deref) by a lock token sent from a not authenticated Subversion client

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request that contains a lock token...

CVE-2011-1034

Cross-site scripting XSS vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information...

CVE-2011-1034: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information...

PT-2011-2825

Name of the Vulnerable Software and Affected Versions IBM Rational Build Forge version 7.0.2 Description A cross-site scripting XSS issue exists in the UI, allowing remote attackers to inject arbitrary web script or HTML via the mod parameter to the "fullcontrol" program. Recommendations For IBM...

(mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser

The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...

(mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser

The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...

DEBIAN-CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

PT-2011-1618

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.3d Description The issue is related to a heap-based buffer overflow in the sql prepare where function, which can be exploited when mod sql is enabled. This occurs because substitution tags in a crafted username ar...

Design/Logic Flaw

Unspecified vulnerability in the modssl component in Oracle Secure Backup 10.3.0.2 allows remote attackers to affect integrity and availability via unknown vectors...

PT-2011-1479

Name of the Vulnerable Software and Affected Versions Mono versions 2.8.x through 2.8.1 Description The issue allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug" in the mod mono module for XSP. Recommendations For Mono...

Debian DSA-2140-1 : libapache2-mod-fcgid - stack overflow

A vulnerability has been found in Apache modfcgid. The Common Vulnerabilities and Exposures project identifies the following problem : - CVE-2010-3872 A stack overflow could allow an untrusted FCGI application to cause a server crash or possibly to execute arbitrary code as the user running the w...

mod_auth_mysql: character encoding SQL injection flaw

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...

PT-2010-5448

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.6 Description The issue is related to a buffer overflow in the in mod plugin, which can be exploited by remote attackers through vectors related to the comment box, potentially having an unspecified impact...

AuraCMS 1.62 - 'pfd.php' SQL Injection

----------------------------------------------------------------------- AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected] Homepage : http://indonesiancoder.com Vendor :...

PT-2010-5132

Name of the Vulnerable Software and Affected Versions httpd affected versions not specified Description A flaw was found in the mod fcgid module of httpd, where a malformed FastCGI response may cause a stack-based buffer overflow in the fcgid header bucket read function, potentially resulting in ...

Foxit Reader 4.1.1 Stack Overflow Exploit - Egghunter Mod

No description provided by source. !/usr/bin/python Date: 15 Nov 10 Author: dookie at offsec.com App: Foxit Reader 4.1.1 preamble =...

Foxit Reader 4.1.1 Stack Overflow Exploit - Egghunter Mod

Exploit for windows platform in category local exploits ========================================================= Foxit Reader 4.1.1 Stack Overflow Exploit - Egghunter Mod ========================================================= !/usr/bin/python preamble =...

Fedora 12 : proftpd-1.3.3c-1.fc12 (2010-17220)

This is an update to the current upstream maintenance release, which addresses two security issues that can be exploited by malicious users to manipulate certain data and compromise a vulnerable system. - A logic error in the code for processing user input containing the Telnet IAC Interpret As...

phpBB Modified by (News CMS) <= Remote Based SQL Injection

Exploit for php platform in category web applications ========================================================== phpBB Modified by News CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 ...