CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

CVE-2009-2606: Undefined Security Weakness

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ================================================================= Citrix XenCenterWeb XSS/SQL/RCE Multiple Remote Vulnerabilities ================================================================= Secure Network - Security Research Advisory...

Citrix XenCenterWeb Multiple Vulnerabilities

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

CVE-2009-2158

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

PT-2009-4610 · Torrenttrader · Torrenttrader Classic

Name of the Vulnerable Software and Affected Versions: TorrentTrader Classic version 1.09 Description: The issue allows remote attackers to obtain a password via a brute-force attack because the account-recover.php file chooses random passwords from an insufficiently large set. Recommendations: F...

Slowloris Denial of Service Attack

Slowloris tries to keep many connections to the target web server open and hold them open as long as possible. It accomplishes this by opening connections to the target web server and sending a partial request. Periodically, it will send subsequent HTTP headers, adding to-but never completing-the...

ASP Football Pool 2.3 Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

ASP Football Pool 2.3 - Remote Database Disclosure

ASP Football Pool 2.3 - Remote Database Disclosure !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ;...

ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

No description provided by source. !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--,...

ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== ASP Football Pool 2.3 Remote Database Disclosure Vulnerability ============================================================== !/usr/bin/perl ASP Football Pool v2.3 Script : ASP...

ASP Football Pool 2.3 - Remote Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

CVE-2009-1806: Undefined Security Weakness

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

Microsoft Windows线程池ACL本地权限提升漏洞（MS09-012）

BUGTRAQ ID: 34444 CVECAN ID: CVE-2009-0080 Microsoft Windows是微软发布的非常流行的操作系统。 Windows对当前ThreadPool中的线程设置了错误的ACL，本地攻击者可以利用令牌劫持的方式获得权限提升。成功利用此漏洞的攻击者可以完全控制受影响的系统，攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 临时解决方法： IIS 6.0 -...

Microsoft Windows privilege escalation

Privilege escalation with MSDTC, WMI, RPCSS, Windows Thread Pool services...

Microsoft Windows Vista2008 - Thread Pool ACL Privilege Escalation

Microsoft Windows Vista2008 - Thread Pool ACL Privilege Escalation source: https://www.securityfocus.com/bid/34444/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate th...

Microsoft Windows Vista/2008 - Thread Pool ACL Privilege Escalation

source: https://www.securityfocus.com/bid/34444/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers. The issue affects the...

kernel security and bug fix update

2.6.9-78.0.17.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

MS09-0 0 1 Analysis-vulnerability warning-the black bar safety net

HD Moore moves really fast, the analysis has come out. The effect is only a DOS, not use. This update contains three vulnerabilities, the first one in the last 9 months out, only DOS, after two rather special, is not utilized, the reason is more complex, he is so described: The next two bugs CVE-...

security flaw

The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory vi...