Lucene search
+L

1245 matches found

0day.today
0day.today
added 2011/10/03 12:0 a.m.29 views

sNews sql injection Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2010/08/17 3:52 p.m.7 views

kernel: dvb-core: DoS bug in ULE decapsulation code

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

7.8CVSS5.8AI score0.03603EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2010/06/04 12:0 a.m.39 views

Ubuntu 10.04 LTS : linux regression (USN-947-2)

USN-947-1 fixed vulnerabilities in the Linux kernel. Fixes for CVE-2010-0419 caused failures when using KVM in certain situations. This update reverts that fix until a better solution can be found. We apologize for the inconvenience. It was discovered that the Linux kernel did not correctly handl...

7.8CVSS6.6AI score0.12426EPSS
SaveExploits21References22
Ubuntu
Ubuntu
added 2010/06/03 6:23 a.m.103 views

USN-947-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not correctly handle memory protection of the Virtual Dynamic Shared Object page when running a 32-bit application on a 64-bit kernel. A local attacker could exploit this to cause a denial of service. Only affected Ubuntu 6.06 LTS. CVE-2009-4271 It was...

7.8CVSS6.5AI score0.12426EPSS
SaveExploits21
0day.today
0day.today
added 2010/05/18 12:0 a.m.32 views

TS Special Edition <= v.7.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities Dork: "Powered by TS Special...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/05/18 12:0 a.m.36 views

TS Special Edition 7.0 - Multiple Vulnerabilities

TS Special Edition 3.2 javascript:TSQuickRate'torrent1', 'CHAGEYOURIDHERE'; 4 Apply changes and vote the torrent every time you want...

5.8AI score
SaveExploits0
Prion
Prion
added 2010/04/06 10:30 p.m.24 views

Design/Logic Flaw

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

7.8CVSS6.5AI score0.03603EPSS
SaveExploits0References18Affected Software2
NVD
NVD
added 2010/04/06 10:30 p.m.25 views

CVE-2010-1086

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

7.8CVSS6.5AI score0.03603EPSS
SaveExploits0References18
CVE
CVE
added 2010/04/06 10:0 p.m.98 views

CVE-2010-1086

The CVE-2010-1086 entry concerns the Linux kernel (dvb-core) ULE decapsulation code in dvb_net.c. A vulnerability in the ULE Payload Pointer handling allows an attacker to induce an infinite-loop denial of service via a crafted MPEG-2 TS frame, affecting kernel 2.6.33 and earlier. Connected advis...

7.8CVSS6.3AI score0.03603EPSS
SaveExploits0References18Affected Software1
UbuntuCve
UbuntuCve
added 2010/04/06 12:0 a.m.27 views

CVE-2010-1086

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

7.8CVSS5.9AI score0.03603EPSS
SaveExploits0References2
seebug.org
seebug.org
added 2010/03/05 12:0 a.m.16 views

Linux Kernel dvb_net_ule()函数远程拒绝服务漏洞

BUGTRAQ ID: 38479 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ULE解封装处理代码中存在拒绝服务漏洞,如果远程用户所发送的MPEG2-TS帧的负载指针为182或183,就会导致ULE SNDU的接收程序陷入死循环。 Linux kernel 2.6.x 厂商补丁: Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...

6.8AI score
SaveExploits0
NVD
NVD
added 2009/09/21 7:30 p.m.24 views

CVE-2009-3279

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack...

4.9CVSS5.8AI score0.00379EPSS
SaveExploits1References3
NVD
NVD
added 2009/09/21 7:30 p.m.22 views

CVE-2009-3278

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack...

5.5CVSS5.3AI score0.00408EPSS
SaveExploits1References4
Prion
Prion
added 2009/09/21 7:30 p.m.19 views

Information disclosure

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack...

4.9CVSS6.3AI score0.00404EPSS
SaveExploits3References3Affected Software2
Prion
Prion
added 2009/09/21 7:30 p.m.19 views

Design/Logic Flaw

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack...

4.9CVSS6.8AI score0.00408EPSS
SaveExploits3References4Affected Software2
Prion
Prion
added 2009/09/21 7:30 p.m.27 views

Design/Logic Flaw

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable,...

5.9CVSS6.8AI score0.00404EPSS
SaveExploits2References8Affected Software2
NVD
NVD
added 2009/09/21 7:30 p.m.54 views

CVE-2009-3200

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable,...

5.9CVSS6.2AI score0.00404EPSS
SaveExploits2References8
CVE
CVE
added 2009/09/21 7:0 p.m.52 views

CVE-2009-3278

The CVE-2009-3278 entry concerns the QNAP TS-239 Pro and TS-639 Pro (firmware 2.1.7 0613, 3.1.0 0627, 3.1.1 0815). The vulnerability stems from using the rand library function to generate a recovery key, which makes it easier for local users to brute-force and determine this key. The connected do...

5.5CVSS5.3AI score0.00408EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2009/09/21 7:0 p.m.62 views

CVE-2009-3200

The CVE-2009-3200 entry describes a vulnerability in QNAP TS-239 Pro and TS-639 Pro devices running firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815. An undocumented recovery key is created and stored in the ENCK variable in flash memory, allowing local users to bypass the passphrase and decrypt t...

5.9CVSS6.3AI score0.00404EPSS
SaveExploits2References8Affected Software2
CVE
CVE
added 2009/09/21 7:0 p.m.54 views

CVE-2009-3279

CVE-2009-3279 (and related CVE-2009-3200) affects QNAP TS-239 Pro/TS-639 Pro firmwares 2.1.7 0613, 3.1.0 0627, 3.1.1 0815: it creates a LUKS partition using AES-256 in plain CBC, enabling local users to obtain sensitive information via a watermark attack; an undocumented recovery key stored in fl...

4.9CVSS5.8AI score0.00379EPSS
SaveExploits1References3Affected Software2
Rows per page
Query Builder