Oracle Virtual Server Agent Command Injection

Exploit for unix platform in category remote exploits ============================================= Oracle Virtual Server Agent Command Injection ============================================= 1. Advisory Information Advisory ID: BONSAI-2010-0109 Date published: 2010-10-13 Vendors contacted: Oracl...

Important: Red Hat Security Advisory: qspice security update

Updated qspice packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libvirt security update

CentOS Errata and Security Advisory CESA-2010:0615 Updated libvirt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVS...

Low: Red Hat Security Advisory: libvirt security and bug fix update

Updated libvirt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Microsoft Internet Explorer Event Handler Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another domain or security...

Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

Description Microsoft Visual Basic for Applications VBA is prone to a remote stack-based buffer-overflow vulnerability because of an error related to searching for embedded ActiveX controls within a Microsoft Office document. An attacker could exploit this issue to corrupt stack memory and execut...

CentOS 4 : systemtap (CESA-2010:0125)

Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SystemTap is an instrumentation system for systems running the Linux kernel, version 2.6...

Joomla Autartitarot Directory Traversal

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comautartitarot Directory Traversal Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS:...

Joomla CCNewsLetter Blind SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comccnewsletter BLIND SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS:...

Joomla! Component com_virtuemart - order_status_id SQL Injection

Joomla! Component comvirtuemart - orderstatusid SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comvirtuemart SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla! Component com_virtuemart - order_status_id SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comvirtuemart SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS: Privileged us...

Joomla JBPublishdownfp SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comjbpublishdownfp SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS: Privileg...

Joomla! Component com_casino - SQL Injection

Joomla! Component comcasino - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comcasino SQL Injection Vulnerabilities LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON:...

Joomla! Component com_jbpublishdownfp - SQL Injection

Joomla! Component comjbpublishdownfp - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comjbpublishdownfp SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla Component (com_casino) SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Joomla Component comcasino SQL Injection Vulnerabilities =========================================================== ...BEGIN ADVISORY...

Linux Kernel子系统连接器缺少能力检查漏洞

BUGTRAQ ID: 36834 CVECAN ID: CVE-2009-3725 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/video/uvesafb.c、drivers/staging/pohmelfs/config.c、drivers/staging/dst/dcore.c和drivers/md/dm-log-userspace-transfer.c驱动中缺少能力检查，非特权用户可以向某些使用连接器的子系统发送netlink报文执行一些非授权的操作。 Linux kernel 2.6.x 厂商补丁： Linux...

Novell Privileged User Manager Daemon Detection

Binary data novellnpumdetect.nbin...

Novell Privileged User Manager Library Injection Arbitrary Code Execution (credentialed check)

Binary data novellnpum.nbin...

Sun VirtualBox宿主系统本地拒绝服务漏洞

Bugraq ID: 35960 CNCAN ID：CNCAN-2009080703 Sun VirtualBox是一款功能强大的x86虚拟机软件。 Sun VirtualBox 3.0存在安全问题，允许VirtualBox虚拟机中的非特权用户重新启动宿主操作系统，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun VirtualBox 3.0.2 Sun VirtualBox 3.0 厂商解决方案 用户可升级到Sun VirtualBox 3.0.4版本： http://www.virtualbox.org/...

Novell Privileged User Manager远程库注入漏洞

Bugraq ID: 35752 Novell Privileged User Manager是一款特殊权限用户管理工具，用于加强身份验证。 Novell Privileged User Manager包含的unifid.exe服务存在缺陷，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 unifid.ex服务绑定29010端口提供通过SSL封装的类RPC功能的协议，这个协议允许客户端把方法调用成一个模块。'spf' RPC调用实现不安全的允许远程攻击者通过网络装载任意模块，而导致以服务安全上下文执行任意代码。 Novell Privileged User Manager 2.2...