5623 matches found
CVE-2009-2005
Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...
[Security] XM Easy Personal FTP Server Multiple DoS vulnerabilities
XM Easy Personal FTP Server Multiple DoS vulnerabilities Credits: NeerajT of Nevis Labs http://www.nevisnetworks.com/services.php?id=10 Date of Discovery: 14-May-2009 Vendor: Dxmsoft URL: http://www.dxm2008.com/ Affected: XM Easy Personal FTP Server 5.7.0 Earlier versions may also be affected...
Online Armor < 3.5.0.12 (OAmon.sys) Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ====================================================================== Online Armor 3.5.0.12 OAmon.sys Local Privilege Escalation Exploit ======================================================================...
Online Armor 3.5.0.12 - OAmon.sys Local Privilege Escalation
Online Armor 3.5.0.12 - OAmon.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Tall Emu Pty Ltd - http://www.tallemu.com/ | // // ...
Online Armor < 3.5.0.12 - 'OAmon.sys' Local Privilege Escalation
//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Tall Emu Pty Ltd - http://www.tallemu.com/ | // // | | // // | Affected Software: | // // | Online Armor Persona...
dvbbs delete the upload. inc after the shell was a method-vulnerability warning-the black bar safety net
dvbbs delete the upload. inc after the shell was a method - the premise is to give the front Desk administrative privileges Into the background after Go to the user management Just change the personal e-mail address for %eval requestchr3 5%@163.com After saving Find the mail list export Then expo...
Backdoor Trojan: Octopus 0.1
Backdoor Octopus 0.1 is backdoor Trojan program which opens up a security hole on a victim's computerand is a threat to the security of the user's personal data...
Backdoor Trojan: BRX Rat 0.02
Virut.n is backdoor Trojan program which opens up a security hole on a victim's computer, compromising the user's personal data...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...
CVE-2009-1729
Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...
IBM DB2 Information Disclosure Vulnerability (Windows)
This host is installed with IBM DB2 and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2infodiscvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Information Disclosure Vulnerability Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbon...
IBM DB2 Information Disclosure Vulnerability (Linux)
This host is installed with IBM DB2 and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2infodiscvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Information Disclosure Vulnerability Linux Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...
More than 160,000 affected by data breach at UC Berkeley
Hackers had access to a database for about six months at the University of California at Berkeley and stole health-related data on more than 160,000 students and other people who used the school’s health services center. College officials said that the attack on the health center’s database was...
PJBlog个人博客系统cls_logAction.asp文件存在注入漏洞
PJBlog一套开源免费的中文个人博客系统程序，采用asp+Access的技术，具有相当高的运作效能以及更新率，也支持目前Blog所使用的新技术。 在文件class/clslogAction.asp中： oldcate=request.form"oldcate" //第429行 oldctype=request.form"oldtype" D = conn.execute"select catePart from blogCategory where cateID="&oldcate0 程序没有对变量oldcate做任何过滤放入sql查询语句中，导致注入漏洞的产生。 PJBlog...
USPS probes possible mass security breach
CBS News is reporting word about another data breach potentially compromising the personal information of thousands of people. Companies Lexis Nexis and Investigative Professionals have sent up to 40,000 letters to customers whose “sensitive and personally identifiable” information may have been...
Design/Logic Flaw
The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky...
CVE-2008-6754
The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky...
CVE-2008-6754
The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky...
CVE-2008-6754
The CVE-2008-6754 vulnerability affects the Personal Sticky Threads addon 1.0.3c for vBulletin. Remote authenticated users can disclose information from arbitrary threads (title, author, and pages) by toggling a personal sticky, indicating an information disclosure flaw in the addon’s handling of...
CUPS '_cupsImageReadTIFF()'整数溢出漏洞
BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...