Squid Multiple Remote Denial of Service Vulnerabilities

Squid is prone to multiple remote denial-of-service vulnerabilities. Successfully exploiting these issues allow remote attackers to crash the affected application, denying further service to legitimate users. This issue affects Squid 3.0.STABLE16, 3.1.0.11 and prior versions. OpenVAS Vulnerabilit...

Fedora 11 : mediawiki-1.15.1-48.fc11 (2009-7785)

This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1. A cross-site scripting XSS vulnerability was discovered. Only versions 1.14.0, 1.15.0 and release candidates for those releases ar...

CVE-2009-2259

CVE-2009-2259 is a duplicate of CVE-2009-2608 and should reference that entry. Connected records confirm that PHP Address Book 4.0.x contains multiple SQL injection vulnerabilities exploitable via delete.php (id) or index.php (alphabet), enabling remote arbitrary SQL commands. The root cause is u...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...

CVE-2009-2105

SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2105

CVE-2009-2105 affects the TYPO3 References database (t3references) extension versions up to 0.1.1. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL via unspecified vectors, with a CVSS v2 base score of 7.5 (HIGH). Transport/attack vector: network; impact:...

CVE-2009-2105

SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

apr-util billion laughs attack

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

Design/Logic Flaw

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

DEBIAN-CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-0689

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33058 2009-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33312 2009-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10186 2009-11-19...

中国游戏中心游戏大厅 (CGAgent.dll) ActiveX Remote Code Execution Exploit

No description provided by source. ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1. http://bbs.pediy.com/showthread.php?t=87615 2...

ChinaGames - 'CGAgent.dll' ActiveX Remote Code Execution

ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1. http://bbs.pediy.com/showthread.php?t=87615 2. http://www.milw0rm.com/exploits/857...

ChinaGames - CGAgent.dll ActiveX Remote Code Execution

ChinaGames - CGAgent.dll ActiveX Remote Code Execution ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1...

Eggdrop/Windrop 1.6.19 ctcpbuf Remote Crash Vulnerability

Exploit for multiple platform in category dos / poc ========================================================= Eggdrop/Windrop 1.6.19 ctcpbuf Remote Crash Vulnerability ========================================================= eggdrop/windrop remote crash vulnerability This message: Message body...

NuPoint Messenger server transmits authentication credentials in plain text

Overview NuPoint Messenger is a unified communications product that connects to a Microsoft Exchange server. When communicating with the mail server, the NuPoint Messenger server transmits Exchange usernames and passwords in cleartext. Description The NuPoint Messenger server can connect to a...

Mozilla Thunderbird Multiple Vulnerabilities Apr-09 (Windows)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodthunderbirdmultvulnapr09win.nasl 5148 2017-01-31 13:16:55Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities Apr-09 Windows Authors: Sharath S Copyright: Copyright c...

CVE-2009-1437

creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8489 2009-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8519 2009-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8520...