Debian DSA-1665-1 : libcdaudio - heap overflow

It was discovered that a heap overflow in the CDDB retrieval code of libcdaudio, a library for controlling a CD-ROM when playing audio CDs, may result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

[SECURITY] [DSA 1665-1] New libcdaudio packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1665-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 12, 2008 http://www.debian.org/security/faq -...

DSA-1665-1 libcdaudio - heap overflow

Bulletin has no description...

joomlajb2-sql.txt

Joomla Component comjb2PostID SQL-injetion Vulnerability Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, LiTTle-Hack3r, L1RIDON1. ! ModuleName: comjb2 ! ScriptName: Joomla ! GoogleDork: inurl:"option=comjb2 "PostID"...

http-passwd NSE Script

Checks if a web server is vulnerable to directory traversal by attempting to retrieve /etc/passwd or \boot.ini. The script uses several technique: Generic directory traversal by requesting paths like ../../../../etc/passwd. Known specific traversals of several web servers. Query string traversal...

daytime NSE Script

Retrieves the day and time from the Daytime service. Example Usage nmap -sV --script=daytime Script Output PORT STATE SERVICE 13/tcp open daytime |daytime: Wed Mar 31 14:48:58 MDT 2010 Requires comm shortport oops local comm = require "comm" local shortport = require "shortport" local oops =...

SFS EZ BIZ PRO (track.php id) Remote SQL Injection Vulnerability

No description provided by source. | | | EZ BIZ PRO track.php id Remote SQL Injection Vulnerability | | |-------------------- IQ-SecuritY ------------------- | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | script :...

security flaw

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service NULL pointer...

BNBForm Automessage可远程获取文件漏洞

BugCVE: CVE-1999-0937 BUGTRAQ: 2147 BNBForm是一个基于Web的通过表单提交发送邮件的CGI程序，由Big Nose Bird公司开发维护。BNBForm bnbform.cgi脚本实现上存在漏洞，远程攻击者可能利用此漏洞得到主机上的任意知道其名字的文件。 4.0版以下的bnbform.cgi对用户输入未做充分过滤，远程攻击者可能通过在“automessage”变量中指定想获取的系统上的文件名就可以让脚本把此文件寄给自己。攻击者由此可能访问到系统的敏感文件和信息。 1.0-3.0 Big Nose Bird -------------...

e107 <= 0.7.13 (usersettings.php) Blind SQL Injection Exploit

No description provided by source. Author: GiReX Homepage: http://girex.altervista.org Date: 19/10/2008 CMS: e107 URL: http://e107.org/ Note: Works regardless of php.ini settings magicquotes, registerglobals.. Attenction: This exploit was written for educational purpose. Use it at your own risk...

Pro Chat Rooms 3.0.3 - SQL Injection

Author: !DoktOR! Date found: 28.09.08 Product: Pro Chat Rooms Version: 3.0.3 Price: $55 URL: www.prochatrooms.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Gentoo Security Advisory GLSA 200406-04 (mailman)

The remote host is missing updates announced in advisory GLSA 200406-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

InstallShield / Macrovision / Acresso FLEXnet Connect insecurely retrieves and executes scripts

Overview Acresso FLEXnet Connect executes scripts that are insecurely retrieved from a remote web server, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Acresso FLEXnet Connect is a software package that allows vendors to provide...

WebPortal CMS 0.7.4 - download.php SQL Injection

WebPortal CMS 0.7.4 - download.php SQL Injection !/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==--...

WebPortal CMS <= 0.7.4 (download.php aid) SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== WebPortal CMS = 0.7.4 download.php aid SQL Injection Exploit =============================================================== !/usr/bin/perl...

farphp-lfi.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Web Application: FAR - PHP Project version:1.0 Vendor's Address :www.far-php.ro Author: Beenu Arora Address: www.beenuarora.com Python...

OpenImpro 1.1 (image.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== OpenImpro 1.1 image.php id SQL Injection Vulnerability ======================================================== OpenImpro 1.1id Sql Injection Vulnerability Author: nuclear script:...

OpenImpro 1.1 (image.php id) SQL Injection Vulnerability

No description provided by source. OpenImpro 1.1id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/openimpro/openimpro-1.1.zip exploit: target.com/image.php?id=-1 union select 1,2,concatfirstname,0x3a,lastname,0x3a,password,4,5,6 from imperson -- Description:...

alstrasoftvideo-sql.txt

|| | | Video Share Enterprise UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.alstrasoft.com/videoshare.htm | | DorK : Powered ...

Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities

Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/30186/info Apple iPhone and iPod touch are prone to multiple remote vulnerabilities: 1. A vulnerability that may allow users to spoof websites. 2. An information-disclosure vulnerability...