php: information leak vulnerability in var_export()

The varexport function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if displayerrors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution...

Mandriva Update for nss_updatedb MDVA-2010:223 (nss_updatedb)

Check for the Version of nssupdatedb OpenVAS Vulnerability Test Mandriva Update for nssupdatedb MDVA-2010:223 nssupdatedb Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Joomla Flipwall SQL Injection

Joomla Component flipwall SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla comflipwall Bug Type : SQL injection Dork: "comflipwall" Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : +http://0611.info/index.php?option=comflipwall&controller=flipwall&catid=EXPLOIT +...

Joomla Sponsor Wall Component (com_sponsorwall) SQL Injection Vulnerability

No description provided by source. ============================================================ Joomla Component comsponsorwall SQL Injection Vulnerability ============================================================ Author : Fl0riX Bug Researchers Name : Joomla comsponsorwall Bug Type : SQL...

Fedora 12 : texlive-2007-48.fc12 (2010-8242)

Changes in this update: fixes for CVE-2010-0739 and CVE-2010-1440 adds missing defattr to filelists fixes directory ownership of /var/lib/texmf/web2c uses official tarball for jpatch fixes post/postun scriptlets Note that Tenable Network Security has extracted the preceding description block...

DEBIAN-CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-1439

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

Netvidade Engine 1.0 SQL Injection

!/usr/bin/perl -w use strict; use LWP::UserAgent; use Getopt::Long; use MIME::Base64; '/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2o1o |...

Joomla! Component Yelp - SQL Injection

Joomla! Component Yelp - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla Yelp Component SQL Injection Vulnerability LANGUAGE: PHP RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla Component (Yelp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Joomla Component Yelp SQL Injection Vulnerability =================================================== ...BEGIN ADVISORY...

Joomla! Component Job - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla Job Component SQL Injection Vulnerability LANGUAGE: PHP RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla (Job Component) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== Joomla Job Component SQL Injection Vulnerability ================================================== ...BEGIN ADVISORY...

Joomla! Component JE Event Calendar - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla! Component JE Event Calendar - SQL Injection

Joomla! Component JE Event Calendar - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla Component com_ccnewsletter Directory Traversal Vulnerability

No description provided by source. ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comccnewsletter Directory Traversal Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON...

Joomla Component com_kunena Blind SQL Injection Vulnerability

No description provided by source. ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comkunena BLIND SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON:...

Joomla Component jVideoDirect Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component jVideoDirect Blind SQL Injection Vulnerability =============================================================== ...BEGIN ADVISORY...

Joomla Virtuemart 1.1.4 SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comvirtuemart SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS: Privileged us...