2765 matches found
Ex-United Way IT Employee Sentenced to 18 Months
Former United Way employee based in Miami, Luis Robert Altamirano, was sentenced to 18 months in jail and fined $50,000 for accessing his former employers’ network and deleting “numerous files from UWMD’s servers” and disabling “UWMD’s telephone voice mail system and prevented UWMD employees from...
MySQL 5.1 < 5.1.41 Multiple Vulnerabilities
The version of MySQL 5.1 installed on the remote host is earlier than 5.1.41 and is, therefore, potentially affected by the following vulnerabilities : - An incomplete fix was provided in 5.1.24 for CVE-2008-2079, a symlink-related privilege escalation issue. Bug 39277 - MySQL clients linked...
CVE-2009-3577
Autodesk 3D Studio Max 3DSMax 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."...
MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service
MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service source: https://www.securityfocus.com/bid/37297/info MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions. An attacker can exploit these issues to crash the...
Microsoft SQL Server INSERT Statement Buffer Overflow (MS08-040; CVE-2008-0106)
Microsoft SQL Server is a popular relational database management system RDBMS. Microsoft SQL Server can be administered programmatically using system stored procedures, or through Distributed Management Objects DMO. Its primary query language is Transact-SQL, an implementation of the ANSI/ISO...
Operation Phish Phry Nets 100 Cyber Criminals
The largest number of defendants ever charged in a cyber-crime case have been indicted in a multinational investigation conducted in the United States and Egypt that uncovered a sophisticated “phishing” operation that fraudulently collected personal information from thousands of victims that was...
MySQL: Using an empty binary value leads to server crash
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' b single-quote single-quote token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service daemon crash by using this token in a SQL statement...
CVE-2003-1573
The PointBase 4.6 database component in the J2EE 1.4 reference implementation J2EE/RI allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun...
CVE-2003-1573
The PointBase 4.6 database component in the J2EE 1.4 reference implementation J2EE/RI allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun...
Traidnt Up 2.0 - Cookie Authentication Bypass
|| || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Traidnt Up version 2.0 Auth Bypass / Cookie SQL Injection Vulnerability =INFO: http://traidnt.net/vb/showthread.php?t=943260 =BUY: ---- =DORK: ----...
Traidnt Up 2.0 - Cookie Authentication Bypass
Traidnt Up 2.0 - Cookie Authentication Bypass || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Traidnt Up version 2.0 Auth Bypass / Cookie SQL Injection Vulnerability =INFO: http://traidnt.net/vb/showthread.php?t=943260 =BUY: ---- =DORK: ----...
Cyrus SASL library buffer overflow vulnerability
Overview The Cyrus SASL library contains a buffer overflow vulnerability that could allow an attacker to execute code or cause a vulnerable program to crash. Description SASL Simple Authentication and Security Layer is a method for adding authentication support to various protocols. SASL is...
CVE-2009-1514
Removed by vendor...
CVE-2009-1514: Undefined Security Weakness
Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a throw statement with a long exception value...
Simple PHP test-vulnerability warning-the black bar safety net
The test site is as follows http://www.. com Find a stepping on point http://www.. com/zhaobiao/zhaobiaohyshow. php? id=1 4 9 8 3 0 Submit a' Returns the result Warning: mysqlresult: supplied argument is not a valid MySQL result resource in /var/www/html/zhaobiao/zhaobiaohyshow.php on line 1 3 5...
CVE-2009-1160
Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.081, 7.1 before 7.1274, 7.2 before 7.249, and 8.0 before 8.045 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended...
Mandriva Update for mysql MDVSA-2008:150 (mysql)
Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2008:150 mysql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1
Ubuntu Update for Linux kernel vulnerabilities USN-559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Design/Logic Flaw
Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the...
