515 matches found
Buffer overflow
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures...
CVE-2013-5882
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures...
CVE-2013-5882
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures...
CVE-2013-5882
CVE-2013-5882 affects Oracle MySQL Server (MySQL) 5.6.13 and earlier. The vulnerability is described as unspecified and related to Stored Procedures, allowing remote authenticated users to affect availability via unknown vectors. Available connected sources (e.g., an OpenVAS entry for Oracle MySQ...
74CMS talent system v3. 2 injection and full version pass rounded out the background is attached using the EXP-bug warning-the black bar safety net
Set of procedures filter is still relatively full, but all versions are GBK encoding is his flawed but basically the string into the library when the author used the iconv to convert the submitted over the data encoding into utf8 So the use of wide-character injection there is no way out but the...
Yahoo data leak by Virus_Hima, Why do we need a proactive security?
In November I was contacted for first time by the Egyptian Hacker named ViruSHimA who announced me to have hacked into Adobe servers and leaked private data. The hacker violated Adobe servers gaining full access and dumping the entire database with more of 150,000 emails and hashed passwords of...
Cisco Nexus 1000V Series Switch Software Release 4.2(1)SV1(5.2) Virtual Security Gateway Bypass Issue
The Cisco Product Security Incident Response Team PSIRT would like to notify customers of an issue that may impact their network security posture when upgrading the Cisco Nexus 1000V Series Switches to Software Release 4.21SV15.2 with deployments that have Cisco Virtual Security Gateway VSG...
IBM DB2 privilege escalation
Privilege escalation via GETWRAPCFGC and GETWRAPCFGC2 stored procedures...
Team SHATTER Security Advisory: XML file disclosure vulnerability via GET_WRAP_CFG_C and GET_WRAP_CFG_C2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory XML file disclosure vulnerability via GETWRAPCFGC and GETWRAPCFGC2 system stored procedures. Risk Level: Medium Affected versions: IBM DB2 LUW 9.1, 9.5, 9.7, 10.1 Remote exploitable: No Credits: This...
IBM DB2 9.5 < Fix Pack 10 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 9.5 running on the remote host is affected by one or more of the following issues : - An unspecified information disclosure error exists related to the XML feature that can allow improper access to arbitrary XML files. IC81461, CVE-2012-0713 -...
German Police eavesdropping Facebook, Gmail, Skype Conversations
An eavesdropping tool allegedly used by the German government to intercept Skype calls is full of security problems and may violate a ruling by the country's constitutional court, according to a European hacker club. The information was released as part of a move towards financial transparency. T...
[SECURITY] Fedora 17 Update: phpMyAdmin-3.5.0-1.fc17
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
CVE-2012-2111
The CVE-2012-2111 vulnerability is in the Samba RPC code (LSA procedures) that fail to properly restrict modifications to the privileges database, enabling a remote authenticated user to obtain the take_ownership privilege. Affected lines indicate Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, a...
Parallels PLESK 9.x - Insecure Permissions
Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...
COCOON Counter statistical procedures vulnerability summary-vulnerability warning-the black bar safety net
A default database: counter/db/dbCCCounter6. mdb It can also be directly opened: http://www.badguest.cn /Counter/utilities/update. asp To view the source file, lookup! You can find the database address. Program problem. Second, the storm path vulnerability Use the probe http://www. xxx. com...
Million enterprise Internet site program through the kill oday and repair programme-vulnerability warning-the black bar safety net
1, vulnerability analysis Vulnerability exists page: newsdisp. asp Obviously the injection vulnerability is! Some stations do anti-Note You! (cookie injection can be done. Generally the table name: admin Field name: username password Some STATION Table for wqadmin field Ibid. There is a more awso...
MySQL < 5.5.6 Multiple Denial of Service
The version of MySQL installed on the remote host is older than 5.5.6. As such, it reportedly is prone to multiple denial of service attacks : - The improper handling of type errors during argument evaluation in extreme-value functions, e.g., 'LEAST' or 'GREATEST' causes server crashes...
[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.7-1.fc14
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index =3D es, users, permissions, while you still have the ability to...
[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.3.2-1.fc15
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.3.1-1.fc14
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...