Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit

Exploit for unknown platform in category web applications ================================================================ Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit ================================================================ !/usr/bin/perl...

Linux kernel minor signal handling vulnerability

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...

Linux kernel minor signal handling vulnerability

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...

Linux kernel minor signal handling vulnerability

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...

Myiosoft EasyBookMarker 4 - 'Parent' SQL Injection

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

Myiosoft EasyBookMarker 4 - Parent SQL Injection

Myiosoft EasyBookMarker 4 - Parent SQL Injection ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

HAVP sockethandler.cpp客户端连接拒绝服务漏洞

BUGTRAQ ID: 30697 CVECAN ID: CVE-2008-3688 HAVP（HTTP Antivirus Proxy）是ClamAV杀毒扫描器的代理。 HAVP的sockethandler.cpp文件没有正确地处理客户端请求，如果客户端通过squid三明治模式的HAVP连接到没有响应的服务器的话，HAVP就会一直读取没有响应的服务器直到RECVTIMEOUT，通常为2分钟。之后HAVP会重新尝试一个循环，而由于未初始化的变量，这个循环为死循环。 仅在使用父代理且父代理为不需解析的数字IP地址时才会出现这个漏洞。 Christian Hilgers HAVP 0.88...

CVE-2008-3067

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits...

CVE-2008-3067

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits...

openSUSE 10 Security Update : sudo (sudo-5349)

This update of sudo flushs the stdin buffer on password timeout. Unflushed buffers can lead to leaking the password via a parent process reading stdin after sudo exits. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Directory traversal

Directory traversal vulnerability in the serverequestmultiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter. NOTE:...

XSS vulnerabilities in create/edit/copy page and blogpost actions

The following create/edit page URL's are vulnerable: - /pages/createpage.action - /pages/docreatepage.action - /pages/editpage.action - /pages/doeditepage.action on parentPageString, mode, labelsString, captchaId The following create/edit blogpost URL's are vulnerable: -...

Moving a subtask Issue Type will sometimes ask the user for a Security Level even though this value is inherited from the Parent Issue.

When you move a subtask from an Issue Type where Security Level is a hidden field, to one where Security Level is no longer hidden, the system can mistakenly ask the User for a new Security Level. This is only a minor issue, as then the subtask will not actually take on the chosen value - it will...

Moving a subtask Issue Type will sometimes ask the user for a Security Level even though this value is inherited from the Parent Issue.

When you move a subtask from an Issue Type where Security Level is a hidden field, to one where Security Level is no longer hidden, the system can mistakenly ask the User for a new Security Level. This is only a minor issue, as then the subtask will not actually take on the chosen value - it will...

CVE-2007-6422

The balancerhandler function in modproxybalancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service child process crash via an invalid bb variable...

Privilege escalation via PR_SET_PDEATHSIG

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal PRSETPDEATHSIG...

Bulk Move does not update the Security Level of subtasks

When doing a bulk move, Parent issues moved to a new project must take any subtasks with them. If the new project has a different Issue Security scheme, then issues should get the default issue security in the new project. Currently a bulk move will change the security setting of parent issues, b...

Code injection

Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the parent window is in a different domain...

PT-2007-4997 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Description: The issue allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the...

Diamondback T4nk encounter pcshare 0 8 1 0 funny profile-vulnerability warning-the black bar safety net

OriginalDiamondback T4nk encounter pcshare 0 8 1 0 funny profile note pcshare 0 8 1 0 pregnancy the whole production process shortcodes column: This“story”is purely entertainment for pacing everyone a laugh: Head give birth to time to secretly"inserted into the"svchosti.e. placenta is assigned a...