CVE-2010-1169

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrar...

Multiple memory corruption vulnerabilities in Ghostscript

=============================================================== Ghostscript, multiple arbitrary code execution vulnerabilities May 11, 2010 CVE-2010-1869 =============================================================== ==Description== Ghostscript www.ghostscript.com, an interpreter for the...

dedecms proof path for the latest vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: dedecms 5.5 procedure leaked site path information. Test address: http://www.dedecms.com/plus/paycenter/alipay/returnurl.php http://www.dedecms.com/plus/paycenter/cbpayment/autoreceive.php http://www.dedecms.com/plus/paycenter/nps/configpaynps.php...

dedecms proof path for the latest vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: dedecms 5.5 procedure leaked site path information. As shown in Figure: ! Test address: http://www.dedecms.com/plus/paycenter/alipay/retur... http://www.dedecms.com/plus/paycenter/cbpayment/au... http://www.dedecms.com/plus/paycenter/nps/configp...

Microsoft SQL Server Extended Procedure Detection

Binary data 5385.prm...

DB2 Audited Procedure Accessed

Binary data 5478.prm...

Sun MySQL Database PROCEDURE ANALYSE Denial of Service

MySQL is a popular open-source implementation of a relational database that supports the Structured Query Language SQL for querying and updating stored data. Communication with the database occurs using the MySQL protocol. As with other database implementations, MySQL has a number of built-in SQL...

Oracle Database DBMS_AQADM_SYS.GRANT_TYPE_ACCESS Procedure SQL Injection (CVE-2009-0977)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

PT-2009-4927 · Microsoft · Windows 2000 Sp4 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 2000 SP4 Description: The issue allows remote attackers to execute arbitrary code via a specially crafted RPC message, which triggers a heap-based buffer overflow. This can be exploited by sending a specially crafted network...

CA BrightStor ARCserve Backup Message Engine Insecure Methods (CVE-2007-5328)

CA BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exist unsecured Remote...

Hack SA under the purview of the idea of adaptation-vulnerability warning-the black bar safety net

Last time already got this station of the SHELL, but the back door has long been K, today inadvertently and got the injection. D detection soon came out gratifying information, the SA permissions, go to the NB inside can list the directory but not the execution, telnet each other 1 4 3 3 can not ...

Microsoft Windows Workstation服务双重释放代码执行漏洞（MS09-041）

BUGTRAQ ID: 35972 CVECAN ID: CVE-2009-1544 Microsoft Windows是微软发布的非常流行的操作系统。 Workstation RPC服务在处理发送给NetrGetJoinInformation函数的参数时没有正确地释放内存，可能出现“双重释放”的情况。成功利用此漏洞的攻击者可以使用提升的权限运行任意指令。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

Oracle Java execCommand (Win32)

This module will create a java class which enables the execution of OS commands. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Java execCommand Win32', 'Description' = %q This module...

IBM AIX ToolTalk RPC Server Remote Buffer Overflow

ToolTalk is an inter-application communications system developed by Sun Microsystems in order to allow applications to communicate with each other at runtime. The ToolTalk service is designed to facilitate the development of inter-operating applications that serve individuals and work groups. A...

ToolTalk rpc.ttdbserverd buffer overflow

Buffer overflow in ttinternalrealpath RPC procedure...

FreeBSD-SA-09:11.ntpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:11.ntpd Security Advisory The FreeBSD Project Topic: ntpd stack-based buffer-overflow vulnerability Category: contrib Module: ntpd Announced: 2009-06-10...

Vulnerability in RPC Could Allow Elevation of Privilege (970238)

This host is missing a critical security update according to Microsoft Bulletin MS09-026. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerability in RPC Could Allow Elevation of Privilege (970238)

This host is missing a critical security update according to Microsoft Bulletin MS09-026. OpenVAS Vulnerability Test $Id: secpodms09-026.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerability in RPC Could Allow Elevation of Privilege 970238 Authors: Antu Sanadi Updated By: Madhuri D on 2010-12-01...

Kernel BUG() in locks_remove_flock

Race condition in the dosetlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service crash via vectors resulting in an interrupted RPC call that leads to a stray FLPOSIX lock, related to improper handling of a race between fcntl and close in th...

Oracle BI — WB_OLAP_AW_REMOVE_SOLVE_ID - privilege escalation

Application: Oracle BI Versions Affected: Oracle BI Oracle Warehouse Builder 10.2.0.5, 11.1.0.7 Vendor URL: http://oracle.com Bugs: PL/SQL Injection, privilege escalation Exploits: YES Reported: 20.04.2009 Vendor response: 22.04.2009 Last response: 12.04.2011 Date of Public Advisory: 16.06.2011...