Lucene search
+L

9836 matches found

rdot
rdot
•added 2014/09/06 12:00 a.m.•603 views

Retrieving all tables and their columns at once MSSQL

In the Name of ALLAH the Most Beneficent and the Merciful Zenodermus, Ch3rn0by1 and Me was workinn on MSSQL.. when Zenodermus thought to make a DIOS for MSSQL.. previously at Код: http://websec.ca/kb/sqlinjection DIOS is under the heading Retrieving Multiple Tables and Columns Код: AND 1=0; BEGIN...

7.2AI score
SaveExploits0
NVD
NVD
•added 2014/09/05 5:55 p.m.•36 views

CVE-2014-5256

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service memory corruption and application crash via deep JSON...

5CVSS8.7AI score0.03292EPSS
SaveExploits1References6
OSV
OSV
•added 2014/09/05 5:55 p.m.•8 views

DEBIAN-CVE-2014-5256

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service memory corruption and application crash via deep JSON...

5CVSS7.2AI score0.03292EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2014/09/05 5:00 p.m.•67 views

CVE-2014-5256

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service memory corruption and application crash via deep JSON...

5CVSS6.5AI score0.03292EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2014/09/05 12:00 a.m.•4 views

PT-2014-6370

Name of the Vulnerable Software and Affected Versions Node.js versions 0.8.0 through 0.8.27 Node.js versions 0.10.0 through 0.10.29 Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, via deep JSON objects. This occurs...

5CVSS0.03292EPSS
SaveExploits1References70
Fedora
Fedora
•added 2014/08/30 3:55 a.m.•48 views

[SECURITY] Fedora 20 Update: zarafa-7.1.10-4.fc20

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

2.1CVSS1.6AI score0.00371EPSS
SaveExploits0
NVD
NVD
•added 2014/08/27 12:55 a.m.•32 views

CVE-2014-3575

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...

4.3CVSS6.5AI score0.11338EPSS
SaveExploits0References11
Prion
Prion
•added 2014/08/27 12:55 a.m.•38 views

Design/Logic Flaw

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...

4.3CVSS7.1AI score0.11338EPSS
SaveExploits0References11Affected Software5
Cvelist
Cvelist
•added 2014/08/27 12:00 a.m.•60 views

CVE-2014-3575

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...

6.4AI score0.11338EPSS
SaveExploits0References11
OSV
OSV
•added 2014/08/26 12:00 a.m.•25 views

UBUNTU-CVE-2014-3575

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...

4.3CVSS7.3AI score0.11338EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2014/08/26 12:00 a.m.•43 views

CVE-2014-3575

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...

4.3CVSS7.3AI score0.11338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/08/26 12:00 a.m.•5 views

PT-2014-5402

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.1 OpenOffice.org OOo versions prior to 4.1.1 Description The issue concerns the OLE preview generation, which might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...

4.3CVSS0.11338EPSS
SaveExploits0References100
securityvulns
securityvulns
•added 2014/08/24 12:00 a.m.•77 views

CVE-2014-3575:OpenOffice Targeted Data Exposure Using Crafted OLE Objects

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-3575 OpenOffice Targeted Data Exposure Using Crafted OLE Objects Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache OpenOffice 4.1.0 and older on Windows. OpenOffice.org versions are also affected. Descriptio...

4.3CVSS1AI score0.11338EPSS
SaveExploits0
Fedora
Fedora
•added 2014/08/23 2:01 a.m.•75 views

[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-4.fc20

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

7.5CVSS1.4AI score0.04181EPSS
SaveExploits0
Fedora
Fedora
•added 2014/08/23 1:55 a.m.•69 views

[SECURITY] Fedora 19 Update: rubygem-activerecord-3.2.13-2.fc19

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

7.5CVSS1.4AI score0.04278EPSS
SaveExploits0
zdt
zdt
•added 2014/08/15 12:00 a.m.•28 views

Wordpress Gallery Objects 0.4 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google:...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/08/13 12:00 a.m.•9 views

CVE-2014-3508: Exposure of Sensitive Information to an Unauthorized Actor

The OBJobj2txt function in crypto/objects/objdat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\0' characters, which allows context-dependent attackers to obtain sensitive information from process...

4.3CVSS5.8AI score0.23292EPSS
SaveExploits0References2
NVD
NVD
•added 2014/08/12 8:55 p.m.•24 views

CVE-2014-5201

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...

7.5CVSS8.4AI score0.04594EPSS
SaveExploits2References3
Prion
Prion
•added 2014/08/12 8:55 p.m.•25 views

Sql injection

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...

7.5CVSS9.1AI score0.04594EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2014/08/12 8:00 p.m.•74 views

CVE-2014-5201

The CVE-2014-5201 entry involves the WordPress Gallery Objects plugin (version 0.4). The vulnerability is a SQL injection in the viewid parameter of the go_view_object action called via wp-admin/admin-ajax.php, allowing remote attackers to execute arbitrary SQL commands. The root cause is imprope...

7.5CVSS8.8AI score0.04594EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder