4739 matches found
CVE-2008-0788
Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...
CVE-2008-0472
Cross-site request forgery CSRF vulnerability in modcp.php in Woltlab Burning Board wBB 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a threaddel action...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in modcp.php in Woltlab Burning Board wBB 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a threaddel action...
PYSEC-2008-8
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool...
CoolPlayer 2.17 .m3u Playlist Stack Overflow Exploit
No description provided by source. CoolPlayer, Latest Build: 217 Web:: http://coolplayer.sourceforge.net/ Playlist.m3u File Local Buffer Overflow Exploit Vuln: http://www.securityfocus.com/bid/21396 Greetz: Luigi Auriemma que ha descubierto una nueva vulnerabilidad en este software junto...
Digging inside the operating system does not export the function,will be injected to the end-vulnerability warning-the black bar safety net
InjectCode for Win9x.. Article author:Anskya Original source:see snow Forum Reproduced please retain the copyrightThank you Now injected many ways,but without the outer cover three: 1. Using the mapping code and then create a remote thread 2. The use of the message hook to insert the DLL in two 3...
CVE-2007-6382
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
Design/Logic Flaw
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
CVE-2007-6382
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
CVE-2007-6382
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
CVE-2007-6382
Summary: Robocode versions before 1.5.1 are affected by an arbitrary code execution vulnerability involving the Event Dispatch Thread (EDT). According to the documents, a robot can trigger Java code execution by invoking SwingUtilities.invokeLater on the EDT. Affected product/component: Robocode ...
IBM Director fails to properly time-out connection requests from clients
Overview IBM Director Systems, specifically CIM Server, contains a denial-of-service vulnerability that can allow a remote, unauthenticated attacker to render Director inoperative. Description IBM Director is a suite of system management tools.When a rogue connection request is made to IBM Direct...
smf-sql.txt
!/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL Injection filter. I submitted a...
Simple Machines Forum (SMF) 1.1.3 - Blind SQL Injection
!/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL Injection filter. I submitted a...
Solaris 8 (x86) : 126126-01
SunOS 5.8x86: thread patch. Date this patch was last updated by Sun : Aug/29/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...
Sun Solaris线程处理本地拒绝服务漏洞
BUGTRAQ ID: 25821 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris内核中处理线程上下文中的竞争条件安全漏洞可能允许本地非特权用户导致系统忙碌，从而造成拒绝服务的情况。 可能出现一些不同类型的忙碌，因此很难迅速锁定这个漏洞，但做为示例，可对崩溃dump运行以下命令： echo "panicthread::findstack !grep kcpcfree" |mdb unix.0 vmcore.0 如果生成类似于以下的输出的话： 000002a101168a61 kcpcfree+18 就可能出现了这个漏洞。 Sun Solaris 9.0...
HP-UX Security Patch : PHKL_27278
mmap io,VM-JFS ddlock,thread perf,user limit %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26371; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
HP-UX Security Patch : PHKL_28267
thread perf, user limit, cumulative VM %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26387; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
Race condition
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service panic via unspecified vectors related to "the handling of thread contexts."...