Novell Groupwise - Address Book Remote Code Execution

Novell Groupwise - Address Book Remote Code Execution Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website:...

Novell Groupwise - Address Book Remote Code Execution

Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1...

Novell Netware - XNFS.NLM NFS Rename Remote Code Execution

Novell Netware - XNFS.NLM NFS Rename Remote Code Execution Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provench...

Novell Netware - XNFS.NLM STAT Notify Remote Code Execution

Novell Netware - XNFS.NLM STAT Notify Remote Code Execution Application: Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-07 PRL: 2012-01 Author: Francis...

Unfixed XSS vulnerability at www.freetv.pk

Security researcher autoexec trojan, has submitted on 19/09/2011 a cross-site-scripting XSS vulnerability affecting www.freetv.pk, which at the time of submission ranked 109154 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-087 February 16, 2011 -- CVE ID: CVE-2010-4328 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint -- TippingPointTM IPS Customer...

CVE-2010-4258

The doexit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNELDS getfs value, which allows local users to bypass intended accessok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a 1 BUG, 2 NULL pointer...

Novell Groupwise Internet Agent IMAP LIST Command Code Execution

Exploit for linux platform in category dos / poc ======================================================================= Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution ======================================================================= Application: PRL Novell Groupwis...

Novell Groupwise Webaccess Stack Overflow

Application: Novell Groupwise Webaccess Stack Overflow Platforms: Windows, Linux & Netware GroupWise 7.0, 7.01, 7.02, 7.03x, 7.04, 8.0, 8.01x Exploitation: Remote code execution CVE Number: Novell TID: 7006380 Author: Francis Provencher Protek Research Lab's Blog: http://www.protekresearchlab.com...

Novell Groupwise Webaccess Stack Overflow

Exploit for windows platform in category dos / poc ========================================= Novell Groupwise Webaccess Stack Overflow ========================================= Application: Novell Groupwise Webaccess Stack Overflow Platforms: Windows, Linux & Netware GroupWise 7.0, 7.01, 7.02,...

Sql injection

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2010-2510

The CVE-2010-2510 entry describes a SQL injection in the 2daybiz Web Template Software, specifically in customize.php where the tid parameter is exploited to execute arbitrary SQL commands. The vulnerability enables remote attackers to interact with the underlying database, as indicated by the de...

CVE-2010-2510: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

Novell ZENworks Configuration Management Preboot Service Code Execution

Added: 06/17/2010 BID: 39111 OSVDB: 65361 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...

Joomla! Component com_liveticker - Blind SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comliveticker "viewticker" Joomla comliveticker tid Blind SQL Injection Exploit x Usage: Snakespc.php "http://url/index.php?option=comliveticker&task=viewticker&tid=1" '; if $argc 1 $url = $argv1; $r...

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

CVE-2009-3754

Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to modules/bms/invoicesdiscountajax.php, 2 f parameter to dbgraphic.php, and 3 tid parameter in a show action to advancedsearch.php...

CVE-2009-3503: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 rid and 2 tid parameters...

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...