5314 matches found
SimpleLoginSys 0.5 - Authentication Bypass
SimpleLoginSys v0.5 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplesiteadmin/files/simpleloginsys/SimpleLoginSys%20v0.5/simpleloginsys0.5.zip/download + SQL Injection Auth Bypass -...
Mobilelib Gold v3 (Auth Bypass/SQL) Multiple Remote Vulnerabilities
No description provided by source. ------------------Mobilelib Gold v3 Auth Bypass/SQL Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Mobilelib Gold version : 3.0...
Fedora Core 10 FEDORA-2009-7680 (perl)
The remote host is missing an update to perl announced via advisory FEDORA-2009-7680. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Novell eDirectory Multiple Vulnerabilities (Jul 2009) - Windows
Novell eDirectory is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:novell:edirectory";...
python off-by-one locale.strxfrm() (possible memory disclosure)
Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...
Limny 1.01 - Authentication Bypass
Limny 1.01 - Authentication Bypass + Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in...
Stack overflow
Off-by-one error in the optionswrite function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which trigge...
openSUSE Security Update : irssi (irssi-1004)
Fixed a irssi off by one overflow in the eventwallops function. CVE-2009-1959 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update irssi-1004. The text description ...
openSUSE Security Update : irssi (irssi-1004)
Fixed a irssi off by one overflow in the eventwallops function. CVE-2009-1959 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update irssi-1004. The text description ...
Fedora 10 : perl-5.10.0-73.fc10 (2009-7680)
This security update fixes an off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Moreover, it contains a subtle change to the configuration that does not affect the Perl interpreter itself, but fixes the propagation of the chosen options to the modules. For example, a rebuild of perl-Wx...
CVE-2009-0192
Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow...
Novell eDirectory iMonitor buffer overflow
Off-by-one overflow on HTTP Accept-Language: header...
Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit
Exploit for linux platform in category local exploits ======================================================================= Linux Kernel include include include include include include sys/sock...
kernel security and bug fix update
2.6.9-89.0.3.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...
DEBIAN-CVE-2008-6838
Cross-site scripting XSS vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via the off parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Apache APR-Utils Multiple Denial of Service Vulnerabilities
The host is installed with Apache APR-Utils and is prone to Multiple Denial of Service Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapacheapr-utilsmultdosvulnjun09.nasl 5055 2017-01-20 14:08:39Z teissa $ Apache APR-Utils Multiple Denial of Service Vulnerabilities Authors: Nikita MR...
Apache APR-Utils Multiple Denial of Service Vulnerabilities
Apache APR-Utils is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-2177
code/display.php in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a "....//" dot dot in the s parameter, which is collapsed into a "../" value...
RedHat Security Advisory RHSA-2009:1108
The remote host is missing updates announced in advisory RHSA-2009:1108. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat Enterprise Linux 3 contains an embedded copy of the Apache Portable Runtime APR utility library, a free library of C data structures and...
RedHat Security Advisory RHSA-2009:1107
The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR. Including support for...