EggAvatar for vBulletin 3.8.x - SQL Injection

!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift; my $req = HTTP::Request-newPOST =...

Google Chrome < 9.0.597.107 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 9.0.597.107. Such versions are reportedly affected by multiple vulnerabilities : - An unspecified error exists in the URL bar operations which can allow spoofing attacks. Issue 54262 - An unspecified error exists in the...

CVE-2011-1114

Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."...

CVE-2011-1114

Removed by vendor...

[PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables

PRE-CERT Security Advisory Advisory: PRE-SA-2011-01 Released on: 23 Feb 2011 Last updated on: 23 Feb 2011 Affected product: Linux Kernel 2.4 and 2.6 Impact: - privilege Escalation - denial-of-service - disclosure of sensitive information Origin: storage devices CVE Identifier: - CVE-2011-1010...

OpenOffice.org: Array index error by insecure parsing of broken rtf tables

Use-after-free vulnerability in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via malformed tables in an RTF document...

OpenOffice.org: Array index error by insecure parsing of broken rtf tables

Use-after-free vulnerability in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via malformed tables in an RTF document...

OpenOffice.org: Array index error by insecure parsing of broken rtf tables

Use-after-free vulnerability in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via malformed tables in an RTF document...

MySQL: mysqld DoS (assertion failure) by using temporary InnoDB engine tables with nullable columns (MySQL bug #54044)

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service mysqld daemon crash by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure...

MySQL Multiple Denial Of Service Vulnerabilities

MySQL is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...

Design/Logic Flaw

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service mysqld daemon crash by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure...

CVE-2010-3680

CVE-2010-3680 affects Oracle MySQL 5.1 prior to 5.1.49. It allows remote authenticated users to cause a denial of service (mysqld crash) by creating temporary tables with nullable columns while using InnoDB, triggering an assertion failure. Mitigation: upgrade MySQL to a version where the issue i...

Information disclosure in LightNEasy

Vulnerability ID: HTB22751 Reference: http://www.htbridge.ch/advisory/informationdisclosureinlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability Type: Information disclosure Status:...

Linux Kernel 2.6.37-rc2 - ACPI custom_method Local Privilege Escalation

Linux Kernel 2.6.37-rc2 - ACPI custommethod Local Privilege Escalation / american-sign-language.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4347 This custommethod file allows to inject custom ACPI methods into the ACPI interpreter...

Linux Kernel < 2.6.37-rc2 ACPI custom_method Privilege Escalation

Exploit for linux platform in category local exploits / american-sign-language.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4347 This custommethod file allows to inject custom ACPI methods into the ACPI interpreter tables. This contro...

[SECURITY] Fedora 13 Update: phpMyAdmin-3.3.8.1-1.fc13

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges, export data into various formats and ...

Dejcom Market CMS - 'showbrand.aspx' SQL Injection

Exploit Title: Dejcom Market Cms SQL injection Date: 01/12/2010 Author: Mormoroth Dork : "Powered By Dejcom Market CMS" Version: ALL Version Exploit: %27 or 1=select top 1 tablename from informationschema.tables where tablename not...

Dejcom Market CMS SQL Injection

Exploit Title: Dejcom Market Cms SQL injection Date: 01/12/2010 Author: Mormoroth Dork : "Powered By Dejcom Market CMS" Version: ALL Version Exploit: %27 or 1=select top 1 tablename from informationschema.tables where tablename not...

Information disclosure in IceBB

Vulnerability ID: HTB22687 Reference: http://www.htbridge.ch/advisory/informationdisclosureinicebb1.html Product: IceBB Vendor: XAOS Interactive http://icebb.net/ Vulnerable Version: 1.0-rc10 Vendor Notification: 02 November 2010 Vulnerability Type: Information Disclosure Status: Not Fixed, Vendo...

IceBB 1.0-rc10 Disclosure / SQL Injection

=================================== Vulnerability ID: HTB22686 Reference: http://www.htbridge.ch/advisory/informationdisclosureinicebb.html Product: IceBB Vendor: XAOS Interactive http://icebb.net/ Vulnerable Version: 1.0-rc10 Vendor Notification: 02 November 2010 Vulnerability Type: Information...