Netjuke 1.0 RC1 - SQL Injection Vulnerabilities

Title: ====== Netjuke 1.0 RC1 - SQL Injection Vulnerabilities Date: ===== 2012-04-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=506 VL-ID: ===== 506 Introduction: ============= The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all...

Asterisk SIP Channel Driver Uninitialized Variable Request Parsing DoS (AST-2011-012)

According to the version in its SIP banner, the version of Asterisk running on the remote host can be crashed remotely by an authenticated user when parsing an invalid SIP URI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Linux Kernel 2.6.37-rc1 - serial_multiport_struct Local Information Leak

Linux Kernel 2.6.37-rc1 - serialmultiportstruct Local Information Leak / Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; i...

In-link 2.3.45.1.3 RC1 - cat SQL Injection

In-link 2.3.45.1.3 RC1 - cat SQL Injection source: https://www.securityfocus.com/bid/49508/info In-link is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Hastymail2 < 1.1 RC1 Multiple XSS Vulnerabilities

Hastymail2 is prone to multiple cross-site scripting XSS vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

In-link 2.3.4/5.1.3 RC1 - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/49508/info In-link is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Linux Kenel 2.6.37-rc1 - serial_core TIOCGICOUNT Leak

Linux Kenel 2.6.37-rc1 - serialcore TIOCGICOUNT Leak / Linux include include include include include include int mainint argc, char argv int fd, ret = 0, i; struct serialicounterstruct buffer; printf" Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak exploit\n"; ifargc 2 printf" You need to supply a...

JAKCMS <= v2.01 RC1 Blind SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/python jakCMS = v2.01 RC1 Blind SQL Injection Exploit Understanding: The parameters 'JAKCOOKIENAME' and 'JAKCOOKIEPASS' are parsed via cookies to the application and are unchecked for malicious characters. The contents of these...

Linux Kernel &quot;pipe_fcntl()&quot;本地拒绝服务漏洞

BUGTRAQ ID: 45125 CVECAN ID: CVE-2010-4256 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成内核崩溃，拒绝服务合法用户。 Linux kernel 2.6.35-rc1 - 2.6.37 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

[SECURITY] Fedora 13 Update: openttd-1.0.3-0.1.RC1.fc13

OpenTTD is modeled after a popular transportation business simulation game by Chris Sawyer and enhances the game experience dramatically. Many features were inspired by TTDPatch while others are original...

CVE-2009-4410

The fuseioctlcopyuser function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.y uses the wrong variable in an argument to the kunmap function, which allows local users to cause a denial of service panic via unknown vectors...

SuSE 11.2 Security Update: kmps (2009-10-28)

This update contains kernel module packages for the openSUSE 11.2 RC1 test kernel update. It contains all kernel module packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if !...

Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak

/ written by Ingo Molnar -- it's true because this comment says the exploit was written by him! / include include unsigned int r81; unsigned int r82; unsigned int r91; unsigned int r92; unsigned int r101; unsigned int r102; unsigned int r111; unsigned int r112; unsigned int r121; unsigned int r12...

VLC Media Player 1.0.2 smb:// Stack Overflow

VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download: http://majorgeeks.com/downloadget.php?id=4674&file=1&evp=a87d1b50269ba27878899d30ec7cd947 XPSP3 Crash """ EAX FFFFFFFE ECX...

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download:...

Firebird SQL op_connect_request main listener shutdown Vulnerability

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Firebird SQL opconnectrequest main listener shutdown vulnerability 1. Advisory Information Title: Firebird SQL opconnectrequest mai...

Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities

Campsite is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities

This host is running Campsite and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcampsitemultvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Campsite 'gcampsiteDir' Remote and Local File Inclusion Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Cross site scripting

Cross-site scripting XSS vulnerability in admin-files/templates/listdir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter...

CVE-2009-2183

Campsite 3.3.0 RC1 is affected by a Directory Traversal (CVE-2009-2183) in admin-files/ad.php, due to a crafted value in GLOBALS[g_campsiteDir] that allows remote attackers to read and possibly execute arbitrary local files via a .. sequence. The issue is a Local/Remote File Inclusion vulnerabili...