7205 matches found
Important: Red Hat Security Advisory: xen security and bug fix update
Updated xen packages that resolve a couple of security issues and fix a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xen packages contain tools for managing the virtual machine monit...
TPBroker Denial of Service Vulnerability
Overview TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor terminate abnormally when the TSC Domain Manager receives invalid messages. Impact An attacker could cause a Denial of Service DoS condition. Solution Please refer to the 'Vendor Information' section f...
Thunder local overflow POC-the exploit-warning-the black bar safety net
By:mad DogB. C. T Previously been in the pass thunder and 0day, the Activex should be almost, but also not neglect, or uninstall it, today the abundance of the initial issuance to a URL, the original pixel a Thunderbolt 0day, see the instructions or remotely! Feel a, look at that vulnerability...
CVE-2008-2034
SQL injection vulnerability in wp-downloadmonitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Sql injection
SQL injection vulnerability in wp-downloadmonitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-2034
CVE-2008-2034 affects the WordPress ecosystem via the Download Monitor plugin version 2.0.6. The vulnerability is in wp-download_monitor/download.php and allows a remote attacker to inject arbitrary SQL through the id parameter, enabling unauthorized database manipulation. The provided documents ...
CVE-2008-2034
SQL injection vulnerability in wp-downloadmonitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
WordPress Download Monitor Plugin <= 2.0.6 - SQL Injection
Because of this vulnerability in wp-downloadmonitor/download.php, the attackers can execute arbitrary SQL commands via the "id" parameter. Solution Update the plugin...
WordPress下载监控插件id参数SQL注入漏洞
BUGTRAQ ID: 28975 WordPress是一款免费的论坛Blog系统。 WordPress中的下载监控插件wp-downloadmonitor/download.php没有正确地过滤对id参数的输入便在SQL查询中使用，这允许远程攻击者通过操控SQL查询执行SQL注入攻击。 WordPress Download Monitor 2.0.6 WordPress --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://wordpress.org/extend/plugins/download-monitor/...
Fedora 7 : fedora-ds-admin-1.1.4-1.fc7 (2008-3214)
This release addresses two security vulerabilities in the package: - shell command injection in CGI replication monitor CVE-2008-0892 - unrestricted access to CGI scripts CVE-2008-0893 Fix Description: Remove ScriptAlias for bin/admin/admin/bin - do not use that directory for CGI URIs - use only...
Fedora 8 : fedora-ds-admin-1.1.4-1.fc8 (2008-3220)
This release addresses two security vulerabilities in the package: - shell command injection in CGI replication monitor CVE-2008-0892 - unrestricted access to CGI scripts CVE-2008-0893 Fix Description: Remove ScriptAlias for bin/admin/admin/bin - do not use that directory for CGI URIs - use only...
CVE-2008-0892
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
Authentication flaw
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
CVE-2008-0892
The CVE-2008-0892 issue affects the replication monitor CGI script (repl-monitor-cgi.pl) in the Red Hat Administration Server used with Red Hat Directory Server 8.0 on RHEL4/RHEL5, allowing remote command execution via the CGI interface. The root cause is a command-injection flaw in the replicati...
CVE-2008-0892
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
Server: shell command injection in CGI replication monitor
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
Borland StarTeam Multicast服务GMWebHandler::parse_request()栈溢出漏洞
BUGTRAQ ID: 28602 CVECAN ID: CVE-2008-0311 Borland CaliberRM是Borland所捆绑的开发部署解决方案中的企业软件要求管理软件。 CaliberRM的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 CaliberRM的StarTeam多播服务组件（STMulticastService）包含有有漏洞的函数PGMWebHandler::parserequest： .text:003AA15D call PGMWebHandler::parserequestchar const ,uint,char...
Cisco CiscoWorks Internetwork Performance Monitor code execution
It's possible to execute commands without authentication...
