2208 matches found
phpcms v9 latest burst pipe processing password vulnerability-vulnerability warning-the black bar safety net
Vulnerability causes is not to say, 文件在phpcms/api.php interested basin friends can go dig a dig phpcms the 洞子 it. The main use of the process: The first step: to register a user http://www.wooyun.in/index.php?m=member&c=index&a=register&siteid=1 Second step: access the api file, broke the table...
CVE-2012-3410
Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix...
Stack overflow
Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix...
Scientific Linux Security Update : neon on SL4.x, SL5.x i386/x86_64
CVE-2009-2473 neon, gnome-vfs2 embedded neon: billion laughs DoS attack CVE-2009-2474 neon: Improper verification of x509v3 certificate with NULL zero byte in certain fields It was discovered that neon is affected by the previously published 'null prefix attack', caused by incorrect handling of...
Scientific Linux Security Update : curl on SL5.x i386/x86_64
Scott Cantor reported that cURL is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker could use the...
Scientific Linux Security Update : curl on SL3.x i386/x86_64
Scott Cantor reported that cURL is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker could use the...
Scientific Linux Security Update : w3m on SL5.x i386/x86_64
It was discovered that w3m is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker could use the...
Scientific Linux Security Update : php on SL3.x, SL4.x, SL5.x i386/x86_64
CVE-2009-2687 php: exifreaddata crash on corrupted JPEG files CVE-2009-3292 php: exif extension: Multiple missing sanity checks in EXIF file processing CVE-2009-3291 php: openssl extension: Incorrect verification of SSL certificate with NUL in name CVE-2009-3546 gd: insufficient input validation ...
crypt(): DES encrypted password weakness
The cryptdes aka DES-based crypt function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an...
Joomla 2.5.4 SQL Injection
TITLE ....... Joomla 2.5.4 with components/extensions I found @ webs DATE ........ 07.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://joomla.org VERSION ..... 2.5.4 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2...
DEBIAN-CVE-2011-4458
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093...
Koyo DirectLogic PLC Password Brute Force Utility
This module attempts to authenticate to a locked Koyo DirectLogic PLC. The PLC uses a restrictive passcode, which can be A0000000 through A9999999. The "A" prefix can also be changed by the administrator to any other character, which can be set through the PREFIX option of this module. This modul...
ESPCMS pass to kill 0day-vulnerability warning-the black bar safety net
Baidu keywords:inurl:index. php? ac=article&at=read&did= =========================================================================================================== 默认 后台 :adminsoft/index.php OR admin...
CVE-2011-3323
The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service out-of-bounds memory access and daemon crash via a Link State Update message with an invalid IPv6 prefix length...
Out-of-bounds
The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service out-of-bounds memory access and daemon crash via a Link State Update message with an invalid IPv6 prefix length...
CVE-2011-3323
CVE-2011-3323 affects Quagga’s OSPFv3 implementation (ospf6d) before 0.99.19. A Link State Update with an invalid IPv6 prefix length can cause out-of-bounds memory access and a daemon crash (DoS). Remediation per the connected docs is upgrade to Quagga 0.99.19 or newer; exploitation details are n...
CVE-2011-3323
Removed by vendor...
CVE-2011-3323
The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service out-of-bounds memory access and daemon crash via a Link State Update message with an invalid IPv6 prefix length...
WordPress Plugin A to Z Category Listing 1.3 - SQL Injection
Exploit Title: WordPress A to Z Category Listing plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $initletter = $GET'R'; $sql = "select from ".$tableprefix."terms wpt,".$tableprefix."termtaxonomy wptt where wpt.name like...
WordPress mySTAT plugin <= 2.6 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress mySTAT plugin = 2.6 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mystat.2.6.zip Version: 2.6 tested Note: magicquotes has...