Sql injection

SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2105

SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2105

CVE-2009-2105 affects the TYPO3 References database (t3references) extension versions up to 0.1.1. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL via unspecified vectors, with a CVSS v2 base score of 7.5 (HIGH). Transport/attack vector: network; impact:...

CVE-2009-2105

SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2105: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

apr-util billion laughs attack

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-1532: Out-of-bounds Write

Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via "malformed row property references" that trigger an...

Design/Logic Flaw

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

DEBIAN-CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-1955: Improper Restriction of Recursive Entity References in DTDs

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-0689

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33058 2009-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33312 2009-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10186 2009-11-19...

中国游戏中心游戏大厅 (CGAgent.dll) ActiveX Remote Code Execution Exploit

No description provided by source. ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1. http://bbs.pediy.com/showthread.php?t=87615 2...

ChinaGames - CGAgent.dll ActiveX Remote Code Execution

ChinaGames - CGAgent.dll ActiveX Remote Code Execution ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1...

ChinaGames - 'CGAgent.dll' ActiveX Remote Code Execution

ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1. http://bbs.pediy.com/showthread.php?t=87615 2. http://www.milw0rm.com/exploits/857...

Eggdrop/Windrop 1.6.19 ctcpbuf Remote Crash Vulnerability

Exploit for multiple platform in category dos / poc ========================================================= Eggdrop/Windrop 1.6.19 ctcpbuf Remote Crash Vulnerability ========================================================= eggdrop/windrop remote crash vulnerability This message: Message body...

NuPoint Messenger server transmits authentication credentials in plain text

Overview NuPoint Messenger is a unified communications product that connects to a Microsoft Exchange server. When communicating with the mail server, the NuPoint Messenger server transmits Exchange usernames and passwords in cleartext. Description The NuPoint Messenger server can connect to a...

Mozilla Thunderbird Multiple Vulnerabilities Apr-09 (Windows)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodthunderbirdmultvulnapr09win.nasl 5148 2017-01-31 13:16:55Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities Apr-09 Windows Authors: Sharath S Copyright: Copyright c...

CVE-2009-1437

creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8489 2009-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8519 2009-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8520...

Secunia Research: UltraISO Image Name Parsing Format String Vulnerabilities

====================================================================== Secunia Research 01/04/2009 - UltraISO Image Name Parsing Format String Vulnerabilities - ====================================================================== Table of Contents Affected...