Joomla Component Acajoom (com_acajoom) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Joomla Component Acajoom comacajoom SQL Injection Vulnerability ================================================================== Joomla Component comacajoom SQL Injection...

SAP MaxDB sdbstarter环境变量本地特权提升漏洞

BUGTRAQ ID: 28185 CVE ID:CVE-2008-0306 CNCVE ID:CNCVE-20080306 SAP's MaxDB是一款商业性质的数据库程序。 SAP's MaxDB包含的"sdbstarter"程序存在设计错误，本地攻击者可以利用漏洞获得ROOT权限。 问题存在于"sdbstarter"程序处理部分环境变量过程中，这些变量用于制定各个MaxDB组件使用的配置设置，由于不正确处理变量数据，可导致以ROOT权限执行任意指令。 SAP MaxDB 7.6.0.37 可参考如下安全公告获得补丁信息SAP note 1140135：...

F5 BIG-IP Web Management Interface Version

An F5 BIG-IP web management interface is running on this port, and Nessus has determined its software version. Note. HTTP credentials are required to retrieve version information. TRUSTED...

Debian: Security Advisory (DSA-944-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PostgreSQL privilege escalation via dblink

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...

Avocent KVM Over IP Switch Detection

The remote host is an Avocent KVM over IP switch that provides for control of connected servers and devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29923; scriptversion"1.12"; scriptnameenglish:"Avocent KVM Over IP Switch Detection"; scriptsummaryenglish:"Loo...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6114. Reason: This candidate is a duplicate of CVE-2007-6114. Notes: All CVE users should reference CVE-2007-6114 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

DEBIAN-CVE-2007-6328

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

[SECURITY] Fedora 8 Update: tomboy-0.8.1-3.fc8

Tomboy is a desktop note-taking application for Linux and Unix. Simple and easy to use, but with potential to help you organize the ideas and information y ou deal with every day. The key to Tomboy's usefulness lies in the ability to relate notes and ideas together. Using a WikiWiki-like linking...

[SECURITY] Fedora 7 Update: kdeutils-3.5.8-2.fc7

Utilities for the K Desktop Environment. Includes: ark tar/gzip archive manager; kcalc scientific calculator; kcharselect character selector; kdepasswd change password; kdessh ssh front end; kdf view disk usage; kedit simple text editor; kfloppy floppy formatting tool; kgpg gpg gui khexedit hex...

[SECURITY] Fedora 7 Update: tomboy-0.6.1-2.fc7

Tomboy is a desktop note-taking application for Linux and Unix. Simple and easy to use, but with potential to help you organize the ideas and information y ou deal with every day. The key to Tomboy's usefulness lies in the ability to relate notes and ideas together. Using a WikiWiki-like linking...

CVE-2003-1461

Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability CVE-2002-1473...

Apple iTouch/iPhone 1.1.1 - '.tif' Remote Privilege Escalation 'Jailbreak'

milw0rm.com 2007-10-11...

php123-sql.txt

--==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Browse...

Integer overflow

Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments...

CVE-2007-3965

Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments...

CVE-2007-3965

Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments...

SAP NetWeaver和Web Dynpro Java跨站脚本漏洞

SAP Web Dynpro Java是一款Java的WEB应用服务程序。 SAP Web Dynpro Java不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 NetWeaver Application包含的User-Agent-Header内容在服务器应答时没有采用正确的编码，伪造User-Agent-Header可触发跨站脚本问题，构建恶意WEB页，诱使用户访问，可导致获得目标用户敏感信息。 SAP NetWeaver Nw04s SP9 SAP NetWeaver Nw04s SP8 SAP NetWeaver Nw04s SP7 SAP...

screen 4.0.3 Local Authentication Bypass Vulnerability

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date: Known since somewhere in &cantremember...

tomcat XSS in example webapps

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...