10090 matches found
IBM Tivoli存储管理器远程堆溢出漏洞
BUGTRAQ ID: 34077 CVECAN ID: CVE-2008-4563 Tivoli Storage Manager是一种遵循ANSI SAN标准的可扩展解决方案，用于发现、监控和管理企业SAN架构组件，并可分配和自动操纵企业的附加磁盘存储资源。 Tivoli存储管理器dsmsvc.exe守护程序的adsmdll.dll库存在堆溢出漏洞。有漏洞的函数分配了固定大小的堆缓冲区用于存储会话相关数据，然后将用户提供的值用作了拷贝操作的字节长度。由于缺少边界检查，未经认证的远程攻击者可以通过提交恶意请求触发堆溢出，导致拒绝服务或执行任意代码。 IBM Tivoli Storage...
BlindBlog <= 1.3.1 Multiple Vulnerabilities - Active Check
BlindBlog is prone to a local file include LFI vulnerability and multiple SQL injection SQLi vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
Apache Httpd < 2.2.12 : AllowOverride Options handling bypass
A flaw was found in the handling of the "Options" and "AllowOverride" directives. In configurations using the "AllowOverride" directive with certain "Options=" arguments, local users were not restricted from executing commands from a Server-Side-Include script as intended...
[SECURITY] Fedora 9 Update: cairo-dock-1.6.3.1-1.fc9.3
An light eye-candy fully themable animated dock for any Linux desktop. It has a family-likeness with OSX dock, but with more options...
phpslash <= 0.8.1.1 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...
CMS from Scratch <= 1.9.1 (fckeditor) Remote File Upload Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------------- CMS from Scratch = 1.9.1 fckeditor Remote File Upload Exploit by yeat - stakerathotmaildotit http://scratchwebdesignforums.com/forums/index.php?showtopic=629...
Registry and Group Policy Backdoor found letters-vulnerability warning-the black bar safety net
The measured record. Interested in the binding a bit, maybe get out of the back door placement tips Quiet import regedit /s . reg Method one, cancel sticky keys REG import with. reg Windows Registry Editor Version 5.00 HKEYCURRENTUSER\Control Panel\Accessibility\StickyKeys "Flags"="5 0 6"...
CMS NetCat 3.12 SQL Injection / XSS / LFI
NetCat &control=...
CMS NetCat <= 3.12 Multiple Remote Vulnerabilities
No description provided by source. NetCat = 3.12 Multiple Remote Vulnerabilities The description: The set vulnerability in CMS NetCat versions 3.12 and more low was revealed. 1. Multiple File Including Vulnerabilities Vulnerability exists for the reason that direct access to some files, around...
CMS NetCat <= 3.12 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================== CMS NetCat = 3.12 Multiple Remote Vulnerabilities ================================================== NetCat = 3.12 Multiple Remote Vulnerabilities The description: The set vulnerability in...
CMS NetCat 3.12 - Multiple Vulnerabilities
NetCat &control= etc. 4. HTTP Response Splitting Examples of vulnerable files: /netca...
Fedora 9 : openvpn-2.1-0.29.rc15.fc9 (2008-10691)
2008.11.19 -- Version 2.1rc15 Fixed issue introduced in 2.1rc14 that may cause a segfault when a --plugin module is used. Added server-side --opt-verify option: clients that connect with options that are incompatible with those of the server will be disconnected without this option, incompatible...
CVE-2008-5695
wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...
DEBIAN-CVE-2008-5695
wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...
WordPress <= 1.3.1 - Remote Code Execution
Because of this vulnerability, the authenticated users with manageoptions and uploadfiles capabilities can execute arbitrary code by uploading a PHP script. Solution Update WordPress...
CVE-2008-5397
Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...
BitDefender (module pdf.xmd) Infinite Loop Denial of Service PoC
No description provided by source. Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publication Deny of service occurs durin...
Fwd: Deny Of Service and infinite loop in BitDefender (module pdf.xmd)
Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publication Deny of service occurs during parsing of included compressed...
BitDefender (module pdf.xmd) Infinite Loop Denial of Service PoC
Exploit for unknown platform in category dos / poc ================================================================ BitDefender module pdf.xmd Infinite Loop Denial of Service PoC ================================================================ Deny Of Service and infinite loop in BitDefender modu...
CVE-2008-5160: Undefined Security Weakness
Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service daemon crash via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error."...