kdm -- passwordless login vulnerability

The KDE development team reports: KDM can be tricked into performing a password-less login even for accounts with a password set under certain circumstances, namely autologin to be configured and "shutdown with password" enabled...

[Full-disclosure] APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal

Synopsis: APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal Background: APC PowerChute Network Shutdown is used to perform graceful shutdowns of network servers from one main server. Affected Versions: = 2.21 build 116 Description: APC PowerChute Network Shutdown is...

APC PowerChute Network Shutdown directory traversal

Directory traversal in Acme.Serve embedded web server with 5c and 2e...

VP-ASP-SQL.txt

!!! WARNING !!! FOR EDUCATIONAL PURPOSES ONLY! Neither myself nor any of my Affiliates shall be liable for any direct, incidental, consequential, indirect or punitive damages arising out of access to, inability to access, or any use of the content of this advisory, including without limitation an...

Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01]

Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet AS01 Name Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet 6085705 AS01 Systems Affected Oracle Discoverer Servlet Severity Low Risk Category Remote D.o.S. Vendor URL http://www.oracle.com/ Author Alexand...

MOPB-22-2007:PHP session_regenerate_id() Double Free Vulnerability

Summary The sessionregenerateid function that is used to generate a new session identifier fails to clear an already freed pointer to the former session identifier before calling the session identifier generator. When this generator triggers an error this can result in a double free that is easil...

CVE-2007-1346

CVE-2007-1346 concerns ipmitool on Sun Fire X2100M2 and X2200M2. The connected sources indicate a local privilege escalation where a local user can gain elevated privileges and has the ability to reset or power off the server. The exact root cause, affected versions, and exploitation details are ...

Fedora Core 4 : sendmail-8.13.7-2.fc4.1 (2006-836)

Tue Jul 18 2006 Thomas Woerner 8.13.7-2.fc4.1 - using new syntax for access database 177566 - fixed failure message while shutting down sm-client 119429 resolution: stop sm-client before sendmail - fixed method to specify persistent queue runners 126760 - removed patch backup files from...

raptor_orafile.sql.txt

-- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.htm...

Privilege escalation using watch point — Mozilla

Shutdown demonstrated that it was possible to use a JavaScript watch to gain elevated privilege. This could be used to compromise the user's computer and install malware...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

Start the back door of one idea-the vulnerability of early warning-the black bar safety net

A Group Policy startup script; Use process:start the Group Policyrun-gpedit. msc-Computer Configuration-Windows Settings-scriptsstartup/shutdown Start with the shutdown related settings; Select Start-properties-add will pop up select the script name Selection procedure C:\windows\system32\net.exe...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

Sun Grid Engine unauthorized access

It's possible to shut down grid service without authentication...

CVE-2005-4773

Technical details, affected products, and exploit information for CVE-2005-4773 are not publicly provided in the connected documents. Monitor for updates from trusted sources.

Half-Life CSTRIKE Server <= 1.6 (non steam) Denial of Service Exploit

No description provided by source. !/usr/bin/perl Server must not be running steam. /str0ke Half-Life engine remote DoS exploit bug found by Firestorm tested against cstrike 1.6 Windows build-in server, cstrike 1.6 linux dedicated server use IO::Socket; die "usage: ./csdos host" unless $ARGV0;...