Unbound < 1.4.3 'sock_list' Structure Allocation Remote DoS Vulnerability

Unbound is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:unbound:unbound...

Security Wei Bo imitation Taobao multi-user Mall program v7. 2 vulnerability-vulnerability warning-the black bar safety net

==Estimation of many a fancy to Taobao guest number of procedures. A relatively simple system. Program all types of variables are character type, use the Password = replacerequest. form"password","'","" a similar such statement to filter single quotes, and don't know which bit of large cattle hav...

Abton CMS SQL Injection

Hello Full-Disclosure! I want to warn you about vulnerabilities in Abton. It's commercial Ukrainian CMS. ----------------------------- Advisory: Vulnerabilities in Abton ----------------------------- URL: http://websecurity.com.ua/2886/ ----------------------------- Timeline: 31.03.2008 - found t...

Abton CMS remote SQL injection vulnerability

Exploit for unknown platform in category web applications ============================================ Abton CMS remote SQL Injection vulnerability ============================================ ----------------------------- Details: These are SQL DB Structure Extraction and SQL Injection...

Debian DSA-1865-1 : linux-2.6 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1385 Neil Horman discovered a missing fix from the e1000 network driver. A...

CVE-2010-0309

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

CVE-2010-0549

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...

CVE-2010-0549

The CVE-2010-0549 entry affects Xerox WorkCentre 6400 Series (System Software 060.070.109.11407–060.070.109.29510) and Net Controller (060.079.11410–060.079.29310). A vulnerability in the Network Controller allows remote attackers to access the device’s directory structure by sending a crafted Po...

Microsoft Tries to Boost SDL Adoption

Microsoft is trying to boost adoption of the software security practices in its Security Development Lifecycle by releasing a revised set of instructions to make implementation of the process easier and faster. At the Black Hat DC conference on Tuesday, the company announced the release of its...

Privilege escalation

The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly...

CVE-2010-0232

The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly...

phpMySport 1.4 SQL Injection

Multiple Vulnerabilities in phpMySport v1.4 Name Multiple Vulnerabilities in phpMySport Systems Affected phpMySport v1.4 site http://phpmysport.sourceforge.net/en/ Author Amol Naik amolnaik4atgmail.com Date 18/01/2010 OVERVIEW phpMySport v1.4 is vulnerable to following issues: 1. Multiple SQL...

PHP-Fusion Teams Structure Infusion Addon SQL Injection Vulnerability

Exploit for php platform in category web applications Date: 16-1-2010 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=120 Version: PHP-fusion 7.01..03, TeamStructure Infusionall versions Tested on: Firefox 3.0.15, , IE 8 Info: Plugin that allow...

family connections 2.1.3 - Multiple Vulnerabilities

Family Connections = 2.1.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected = 2.1.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-16 X. INDEX I. ABOUT THE...

How to use the database to crack the md5-vulnerability warning-the black bar safety net

Why password the number of bits short of MD5 unsafe? A length of 4 pure lowercase letters to generate passwords in the database with the help of Can in 0. 005s is cracked. This time also includes a connection to the database the time, the running environment is in my 900MHZ personal PC. Note that...

CVE-2009-3135

Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File...

CVE-2009-3135

Microsoft Word Remote Code Execution (CVE-2009-3135) affects Word 2002 SP3, Word 2003 SP3, Word 2004/2008 for Mac, Open XML File Format Converter for Mac, Word Viewer 2003 SP3, and Word Viewer. The vulnerability is a stack-based buffer overflow in Word’s File Information Block (FIB) parsing, whic...

Microsoft Word记录解析栈溢出漏洞（MS09-068）

BUGTRAQ ID: 36950 CVE ID: CVE-2009-3135 Word是微软Office套件中的文件处理工具。 Word处理包含有畸形文件信息块（FIB）结构的特制Word文件的方式中存在栈溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统，攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word Viewer 200...

CVE-2009-3546

The gdGetColors function in gdgd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different...

delphi free kill method-vulnerability warning-the black bar safety net

YeZi's Blog delphi free kill method is summarized as follows: One. Add the junk to compile the code. In fact, many friends are know, Delphi support in the code in the nested Assembly code. That is, if added to the waste Assembly code, on the network can be directly through thefree to kill. For...