HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...

CVE-2007-5644

Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for 1 ajax/sortcategories.php and 2 ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations and other activities...

Code injection

Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for 1 ajax/sortcategories.php and 2 ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations and other activities...

CVE-2007-5643

Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the CategoryID parameter to ajax/sortcategories.php or 2 an unspecified vector to ajax/sortroles.php...

CVE-2007-5644

Lussumo Vanilla 1.1.3 and earlier allows remote unauthenticated users to perform unauthorized operations through two AJAX endpoints (ajax/sortcategories.php and ajax/sortroles.php) due to missing admin-privilege checks. Affected component: Vanilla CMS PHP backend; root cause: no authorization on ...

CVE-2007-5643

CVE-2007-5643 describes multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier, allowing remote attackers to execute arbitrary SQL commands. The affected vectors are (1) the CategoryID parameter to ajax/sortcategories.php and (2) an unspecified vector to ajax/sortroles.php. T...

CVE-2007-5644

Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for 1 ajax/sortcategories.php and 2 ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations and other activities...

CVE-2007-5643

Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the CategoryID parameter to ajax/sortcategories.php or 2 an unspecified vector to ajax/sortroles.php...

Vanilla Forum < 1.1.4 sortcategories.php CategoryID Parameter SQL Injection

Binary data 4258.prm...

Vanilla <= 1.1.3 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== Vanilla = 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo "------------------------------------------------------------\n"; echo "Vanilla - use specific prefix default...

Vanilla &lt;= 1.1.3 Remote Blind SQL Injection Exploit

No description provided by source. ?php Vanilla = 1.1.3 Remote Blind SQL Injection Exploit By InATeam http://inattack.ru/ Requirements: MySQL = 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo "------------------------------------------------------------\n"; echo "Vanilla = 1.1...

Vanilla 1.1.3 - Blind SQL Injection

Vanilla 1.1.3 - Blind SQL Injection = 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo "------------------------------------------------------------\n"; echo "Vanilla - use specific prefix default LUM\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's...

Vanilla 1.1.3 - Blind SQL Injection

= 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo "------------------------------------------------------------\n"; echo "Vanilla - use specific prefix default LUM\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's loop count default 300000\n"; echo "-...

2 vanilla XSS on Wordpress ‘wp-register.php’

There are two vanilla XSS on 'wp-register.php'. Only versions =2.0.1 appear to be affected. More info can be found on GNUCITIZEN's BlogSecurity: http://blogsecurity.net/wordpress/2-vanilla-xss-on-wordpress-wp-registerphp/ Regards, -- pagvac gnucitizen.org, ikwt.com...

Netrek 2.12.0 pmessage2() Remote Limited Format String Exploit

No description provided by source. Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Netrek Vanilla Server EVENTLOG格式串处理漏洞

Netrek Vanilla Server是一个开源软件包，可为Netrek客户端提供多玩家战斗模拟服务。 Netrek Vanilla Server在特定配置情况下存在格式串处理漏洞，远程攻击者可能利用此漏洞控制服务器。 如果在etc/sysdef文件中EVENTLOG=1的话（默认EVENTLOG=0），服务器在处理消息时就可能出现格式串错误。远程攻击者可以通过向服务器发送恶意消息导致拒绝服务或执行任意指令。 Netrek Vanilla Server 2.12 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.netrek.org/...

CVE-2007-1251

Format string vulnerability in the newwarning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the message handling...

Format string

Format string vulnerability in the newwarning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the message handling...

CVE-2007-1251

Netrek Vanilla Server 2.12.0 is affected by a format string vulnerability in ntserv/warning.c (new_warning) when EVENTLOG is enabled. The issue allows remote attackers to crash the server or potentially execute arbitrary code via format string specifiers in message handling. The available sources...

CVE-2007-1251

Format string vulnerability in the newwarning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the message handling...