EUVD-2002-1902

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-14873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 8.0.21 and prior. Difficult to...

Amazon Linux: Security Advisory (ALAS-2016-756)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tipask储存型XSS

简要描述： 存在两处 详细说明： 下载了一个tipask测试 漏洞证明： 站内信发送， 抓包 mysql日志显示 完整的。。。。 后面是没有过滤 INSERT INTO askmessage SET from='abc' , fromuid=3 , touid=2 , subject='aaaaaaaaaaaaaaaaaaa"img src= onerror=alert1' , time=1419138527 , content='" title="1.jpg"/' 第二处 ，发表提问也存在 img...

Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)

Looks like a very serious issue to me - it works on our ProFTPD 1.3.2rc2 Server latest stable on gentoo. 220 ProFTPD 1.3.2rc2 Server Pumpkin xx.xx.xx.xx USER ' and 1=2 union select 1,0x24312452565a583533784324716a304d4d6b4670426b4b486177644264756634392f,uid,gid,homedir,shell from ftp 331 Password...

Power Phlogger 2.2.5 - css_str SQL Injection

Power Phlogger 2.2.5 - cssstr SQL Injection SQL Injection vulnerability in Power Phlogger By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2158/ Description: SQL Injection vulnerability in Power Phlogger it is PHP/MySQL logging tool via counters. To make SQL...

Mysql log file obfuscation

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysqlrealquery function. NOTE: this issue was originally reported for the mysqlquery function, but the vendor states that since mysqlquer...

mod_mylo for Apache mylo_log Logging Function HTTP GET Overflow

According to the banner, the remote host is using a vulnerable version of mylolog, a MySQL logging module for Apache. Such versions have a buffer overflow vulnerability which could result in arbitrary code execution. C Tenable Network Security, Inc. The overflow occurs after the server replied to...