PHPCMS2007 SP6 vote模块SQL注射漏洞

vote/vote.php // 22行 $optionids = isarray$op ? implode',',$op : $op; ... $db-query"UPDATE ".TABLEVOTEOPTION." SET number = number+1 WHERE optionid IN $optionids "; PHPCMS2007 SP6 暂无 !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Phpcms 200...

Red Hat Directory Server LDAP内存泄漏拒绝服务漏洞

BUGTRAQ ID: 30872 CVE ID: CVE-2008-3283 CNCVE ID：CNCVE-20083283 Red Hat Directory Server是一款LDAPv3兼容的目录服务程序。 Red Hat Directory Server存在多个内存泄漏问题，远程攻击者可以利用漏洞使目录服务器消耗大量内存，可能导致应用程序崩溃或不可期的终止。 目前没有详细漏洞细节提供。 RedHat Directory Server 8 EL 5 RedHat Directory Server 8 EL 4 RedHat Directory Server 7.1 SP6...

CVE-2008-1677

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service slapd crash and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression...

Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow

This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2008-0250

CVE-2008-0250: A buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted code execution via a Studio Solution (.SLN) file that contains a long Project line. The connected record confirms the affected product/version and the input vector (long Project line in SLN) as the root c...

Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution Exploit

No description provided by source. usage: vbexploit.py FileName.vbp import sys print "--------------------------------------------------------------------------" print " PoC2 Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution " print " author: shinnai"...

IBM AIX <= 5.3 sp6 capture Terminal Sequence Local Root Exploit

Exploit for aix platform in category local exploits =============================================================== IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char...

Command injection

pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R ParseRoutine command line argument...

CVE-2007-4003

The CVE-2007-4003 issue affects IBM AIX 5.3 SP6 where the setuid root program pioout loads an attacker-supplied shared library when given -R (ParseRoutine). Local users can trigger arbitrary code execution by pointing to a malicious library, potentially gaining root privileges. Several connected ...

Design/Logic Flaw

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...

CVE-2007-0468

CVE-2007-0468 describes a stack-based buffer overflow in rcdll.dll inside msdev.exe (Visual C++ MSVC) of Microsoft Visual Studio 6.0 SP6. The vulnerability is triggered by a long file path in the RC file’s 1 TYPELIB MOVEABLE PURE option, allowing a user-assisted attacker to execute arbitrary code...

Microsoft Visual C++ (.RC Resource Files) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================================= Microsoft Visual C++ .RC Resource Files Local Buffer Overflow Exploit ======================================================================= // // // Microsoft Visual C...

Novell NetWare 6.5 SP2-SP7 LSASS CIFS.NLM Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)

Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...

Vulnerability warning it is very dangerous to the IDA overflow vulnerability-vulnerability warning-the black bar safety net

The program: idahack it. Enter MS-DOS mode, it is assumed that idq. exe located in c:, | c:\idahack.exe Run parameters: c:\idahack chinese win2k : 1 chinese win2ksp1: 2 chinese win2ksp2: 3 english win2k : 4 english win2ksp1: 5 english win2ksp2: 6 japanese win2k : 7 japanese win2ksp1: 8 japanese...

CVE-2006-2466

BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

CVE-2006-0430

Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service server slowdown...