JVN#52492830: VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability

The SSH server IPSSH implementation in VxWorks contains a denial-of-service vulnerability due to an issue in processing pty requests. Impact Receiving a specially crafted pty request packet may cause SSH access to be unavailable until the next reboot. Solution Apply a patch Apply the appropriate...

FileBound 6.2 - Local Privilege Escalation

FileBound 6.2 - Local Privilege Escalation Sense of Security - Security Advisory - SOS-12-010 Release Date. 10-Oct-2012 Last Update. - Vendor Notification Date. 14-Aug-2012 Product. FileBound On-Site Platform. Windows Affected versions. All versions prior to 6.2 Severity Rating. High Impact...

Ektron CMS 8.5.0 - Multiple Vulnerabilities

Ektron CMS 8.5.0 - Multiple Vulnerabilities Sense of Security - Security Advisory - SOS-12-009 Release Date. 05-Sep-2012 Last Update. - Vendor Notification Date. 07-May-2012 Product. Ektron CMS Platform. ASP.NET Affected versions. Ektron CMS version 8.5.0 and possibly others Severity Rating. High...

Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...

Dolphin 7.0.7 Cross Site Scripting

OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...

CVE-2011-4613

The X.Org X wrapper xserver-wrapper.c in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 5219 / 5222 / 5223)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.46 and fixes various bugs and security issues. The following security issues have been fixed : - A signedness issue in CIFS could possibly have lead to to memory corruption, if a malicious server could send crafted replies t...

Stralia Web SQL Injection

+------------------------------------------------------------------------------------------+ |------------------------- Stralia Web SQL Injection Vulnerability ------------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

Joomla BF Quiz 1.3.0 SQL Injection

Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability Date: 29th May 2010 Author: Valentin Category: webapps/0day Version: 1.3.0 Tested on: Debian, Apache2, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Joomla! Component BF Quiz 1.3.0 - SQL Injection (1)

Joomla! Component BF Quiz 1.3.0 - SQL Injection 1 Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability Date: 29th May 2010 Author: Valentin Category: webapps/0day Version: 1.3.0 Tested on: Debian, Apache2, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

Joomla! Component BF Quiz 1.3.0 - SQL Injection (1)

Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability Date: 29th May 2010 Author: Valentin Category: webapps/0day Version: 1.3.0 Tested on: Debian, Apache2, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

No description provided by source. / Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a...

Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM

/ Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a dangling pointer vulnerabilty in...

Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

Exploit for unknown platform in category remote exploits ============================================================== Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit ============================================================== / Apache 2.2.14 modisapi Dangling Pointer Remote...

VP-ASP Shopping Cart 7.0 DB Download Vulnerability

Exploit for asp platform in category web applications ================================================== VP-ASP Shopping Cart 7.0 DB Download Vulnerability ================================================== ======================================================================================== |...

CVE-2009-0268

Race condition in the pseudo-terminal aka pty driver module in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows local users to cause a denial of service panic via unspecified vectors related to lack of "properly sequenced code" in ptc and ptsl...

Race condition

Race condition in the pseudo-terminal aka pty driver module in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows local users to cause a denial of service panic via unspecified vectors related to lack of "properly sequenced code" in ptc and ptsl...

CVE-2009-0268

CVE-2009-0268 describes a race condition in the pty driver (ptc/ptsl) affecting Sun Solaris 8–10 and OpenSolaris before snv_103, leading to a denial of service (panic) via unsequenced code. Public details in connected documents confirm fixes via Solaris patches: 140383-01 (SPARC) and 140384-01 (x...

FreeBSD Security Advisory (FreeBSD-SA-08:01.pty.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:01.pty.asc ADV FreeBSD-SA-08:01.pty.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-08:01.pty.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:01.pty.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...