In-link 2.3.45.1.3 RC1 - cat SQL Injection

In-link 2.3.45.1.3 RC1 - cat SQL Injection source: https://www.securityfocus.com/bid/49508/info In-link is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

In-link 2.3.4/5.1.3 RC1 - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/49508/info In-link is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Hastymail2 < 1.1 RC1 Multiple XSS Vulnerabilities

Hastymail2 is prone to multiple cross-site scripting XSS vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linux Kenel 2.6.37-rc1 - serial_core TIOCGICOUNT Leak

Linux Kenel 2.6.37-rc1 - serialcore TIOCGICOUNT Leak / Linux include include include include include include int mainint argc, char argv int fd, ret = 0, i; struct serialicounterstruct buffer; printf" Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak exploit\n"; ifargc 2 printf" You need to supply a...

JAKCMS <= v2.01 RC1 Blind SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/python jakCMS = v2.01 RC1 Blind SQL Injection Exploit Understanding: The parameters 'JAKCOOKIENAME' and 'JAKCOOKIEPASS' are parsed via cookies to the application and are unchecked for malicious characters. The contents of these...

Linux Kernel &quot;pipe_fcntl()&quot;本地拒绝服务漏洞

BUGTRAQ ID: 45125 CVECAN ID: CVE-2010-4256 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成内核崩溃，拒绝服务合法用户。 Linux kernel 2.6.35-rc1 - 2.6.37 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

[SECURITY] Fedora 13 Update: openttd-1.0.3-0.1.RC1.fc13

OpenTTD is modeled after a popular transportation business simulation game by Chris Sawyer and enhances the game experience dramatically. Many features were inspired by TTDPatch while others are original...

CVE-2009-4410

The fuseioctlcopyuser function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.y uses the wrong variable in an argument to the kunmap function, which allows local users to cause a denial of service panic via unknown vectors...

SuSE 11.2 Security Update: kmps (2009-10-28)

This update contains kernel module packages for the openSUSE 11.2 RC1 test kernel update. It contains all kernel module packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if !...

Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak

/ written by Ingo Molnar -- it's true because this comment says the exploit was written by him! / include include unsigned int r81; unsigned int r82; unsigned int r91; unsigned int r92; unsigned int r101; unsigned int r102; unsigned int r111; unsigned int r112; unsigned int r121; unsigned int r12...

VLC Media Player 1.0.2 smb:// Stack Overflow

VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download: http://majorgeeks.com/downloadget.php?id=4674&file=1&evp=a87d1b50269ba27878899d30ec7cd947 XPSP3 Crash """ EAX FFFFFFFE ECX...

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download:...

Firebird SQL op_connect_request main listener shutdown Vulnerability

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Firebird SQL opconnectrequest main listener shutdown vulnerability 1. Advisory Information Title: Firebird SQL opconnectrequest mai...

Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities

Campsite is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities

This host is running Campsite and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcampsitemultvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Campsite 'gcampsiteDir' Remote and Local File Inclusion Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Cross site scripting

Cross-site scripting XSS vulnerability in admin-files/templates/listdir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter...

CVE-2009-2182

CVE-2009-2182 affects Campsite 3.3.0 RC1, with multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL via the GLOBALS[g_campsiteDir] parameter to a set of PHP scripts across admin-files and articles directories, inclu...

CVE-2009-2181

CVE-2009-2181 is a cross-site scripting (XSS) vulnerability in Campsite 3.3.0 RC1. The flaw exists in admin-files/templates/list_dir.php, where the listbasedir parameter is not properly sanitized, allowing remote attackers to inject arbitrary web script or HTML. Public references (NVD, OpenVAS en...

CVE-2009-2183

Campsite 3.3.0 RC1 is affected by a Directory Traversal (CVE-2009-2183) in admin-files/ad.php, due to a crafted value in GLOBALS[g_campsiteDir] that allows remote attackers to read and possibly execute arbitrary local files via a .. sequence. The issue is a Local/Remote File Inclusion vulnerabili...

Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes a...