Cetera eCommerce 14.0 Cross Site Scripting / SQL Injection

============================================================= I want to warn you about security vulnerabilities in Cetera eCommerce. Which I disclosed already in December 2009 SecurityVulns ID: 10489. ----------------------------- Advisory: Vulnerabilities in Cetera eCommerce...

[SECURITY] Fedora 12 Update: horde-3.3.8-1.fc12

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

Avast! Zoo Denial of Service Vulnerability

avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service infinite loop via a Zoo archive with a direntry structure that points to a previous file. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Star outside the virtual host management system brush money vulnerability+injection vulnerability-vulnerability warning-the black bar safety net

Test station: http://www.. com/ Register for an account, for example: test Visit: http://www.. com/netpay/ips/ Enter your username and amount of recharge. For example: test 1 $ 0 Point the next step will be to generate you an order number. Such as 7 2 2 9 7 8 Remember it Parameter structure:...

[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/libtiff-3.9.4-i486-1slack13.1.txz: Upgraded. This fixes image structure...

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special...

Integer overflow

Integer signedness error in the elfgetdynamicinfo function in elf/dynamic-link.h in ld.so in the GNU C Library aka glibc or libc6 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value...

OSC Visitor Web Stats SQL Injection

Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...

Ubuntu Update for krb5 vulnerabilities USN-940-1

Ubuntu Update for Linux kernel vulnerabilities USN-940-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9401.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for krb5 vulnerabilities USN-940-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

chCounter - indirect SQL Injection Cross-Site Scripting

chCounter - indirect SQL Injection Cross-Site Scripting Exploit Title: chCounter indirect SQL Injection and XSS Vulnerabilities Date: 29.04.2010 Author: Valentin Category: webapps/0day Version: 3.1.1 Tested on: Debian, Apache2, PHP5, MySQL5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

DEBIAN-CVE-2010-0969

Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

Unbound < 1.4.3 'sock_list' Structure Allocation Remote DoS Vulnerability

Unbound is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:unbound:unbound...

Security Wei Bo imitation Taobao multi-user Mall program v7. 2 vulnerability-vulnerability warning-the black bar safety net

==Estimation of many a fancy to Taobao guest number of procedures. A relatively simple system. Program all types of variables are character type, use the Password = replacerequest. form"password","'","" a similar such statement to filter single quotes, and don't know which bit of large cattle hav...

Abton CMS SQL Injection

Hello Full-Disclosure! I want to warn you about vulnerabilities in Abton. It's commercial Ukrainian CMS. ----------------------------- Advisory: Vulnerabilities in Abton ----------------------------- URL: http://websecurity.com.ua/2886/ ----------------------------- Timeline: 31.03.2008 - found t...

Abton CMS remote SQL injection vulnerability

Exploit for unknown platform in category web applications ============================================ Abton CMS remote SQL Injection vulnerability ============================================ ----------------------------- Details: These are SQL DB Structure Extraction and SQL Injection...

Debian DSA-1865-1 : linux-2.6 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1385 Neil Horman discovered a missing fix from the e1000 network driver. A...

CVE-2010-0309

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

CVE-2010-0549

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...

CVE-2010-0549

The CVE-2010-0549 entry affects Xerox WorkCentre 6400 Series (System Software 060.070.109.11407–060.070.109.29510) and Net Controller (060.079.11410–060.079.29310). A vulnerability in the Network Controller allows remote attackers to access the device’s directory structure by sending a crafted Po...

Microsoft Tries to Boost SDL Adoption

Microsoft is trying to boost adoption of the software security practices in its Security Development Lifecycle by releasing a revised set of instructions to make implementation of the process easier and faster. At the Black Hat DC conference on Tuesday, the company announced the release of its...