AJ Matrix DNA suffers from a remote SQL injection vulnerability.
78ed70075e1bc2740cffc58cbff06e3d7b6b62c0aa175d22b6bf98e7956ee737AJ HYPE PRIME suffers from a remote SQL injection vulnerability.
2827340276d03715b01cbc9c4e6fac463ff131287eae68a7d84a7257fca1e520Call For Papers for EC2ND - The 5th European Conference on Computer Network Defence will take place in November 2009 at the Politecnico di Milano technical university in Milano, Italy.
f41e3cbd685ab81a5a39fba0fac7863f5d4efdd4c9497b654fd700c0c6e284a9Epiri Professional Web Browser version 3.0 remote denial of service proof of concept exploit.
4b3dabacd8b74fd241c6d71016dd1b82a14b1452ba85b72da8917eb2ae4ea531Debian Security Advisory 1834-2 - The previous update caused a regression for apache2 in Debian 4.0 "etch". Using mod_deflate together with mod_php could cause segfaults when a client aborts a connection. This update corrects this flaw. A denial of service flaw was found in the Apache mod_proxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time. This issue did not affect Debian 4.0 "etch". A denial of service flaw was found in the Apache mod_deflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would cause mod_deflate to consume large amounts of CPU if mod_deflate was enabled for a large file. A similar flaw related to HEAD requests for compressed content was also fixed.
2bb04b990a52bd709d6c38bea3fd00f71adef9c7a03e217b9679cec6bd703f6dBanner Exchange Script version 1.0 suffers from a remote blind SQL injection vulnerability.
21c148f762ad649f0f3712bd49d4e955fc9a5234c16b1716fae9d732763437a8AJ HYPE ACME suffers from multiple remote SQL injection vulnerabilities.
2aac3715b1dcc0f1a537565260018f1fd657ed1e0b0abbb09d5bea2d8f552b2bSoftbiz Dating Script is susceptible to a remote SQL injection vulnerability in cat_products.php.
91bfac2eb0da6593fa7b3fc52f51cd194f9cec1c3e3105614100e12a557a914bEz Album suffers from a persistent cross site scripting vulnerability.
4fabfff117afcd1456d06c41e1137f5999cf411e5d39dc1f1269190b455edecfWebVision version 2.1 suffers from a cross site scripting vulnerability.
5136a1314126363124d3c6886bc95fac333418375cf83bb690b9139f8ad85177Chkrootkit checks locally for signs of a rootkit. Chkrootkit includes ifpromisc.c to check and see if the interface is in promisc mode, chklastlog.c to check lastlog for deletions, and chkwtmp.c to check wtmp for deletions, strings.c for quick and dirty strings replacement, check_wtmpx.c to check for wtmpx deletions and the files chkproc.c and chkdirs.c to check for LKM trojans. Tested on Linux 2.0.x, 2.2.x and 2.4.x, FreeBSD 2.2.x, 3.x, 4.x, and 5.x, BSDI, OpenBSD 2.6, 2.7, 2.8, 2.9, 3.0 and 3.1, NetBSD 1.5.2 and Solaris 2.5.1, 2.6 and 8.0, and HP-UX 11.
ccb87be09e8923d51f450a167f484414f70c36c942f8ef5b9e5e4a69b7baa17fPTC Script version 1.2 suffers from multiple cross site scripting vulnerabilities.
6fa4cd18ce4be7d29304eb85359634936a36e7ffb11153ab30e4cb9bf13be16aJokes Portal Script Seo version 1.0 suffers from a cross site scripting vulnerability.
fbbad7523878ef80e1df9f8917f9828e2ba2e3e12a1c373b98991148ad79ea78Flash Games Scripts version 1.0 suffers from a cross site scripting vulnerability.
8147ac9347f4ddbd930462ec61eb0e3c38184949699c7763e1b533e6d498b9f0Article Directory Script Seo version 2.5 suffers from a cross site scripting vulnerability.
d5ea1c0cba8d312858cb441518ae333fe0841abb7f4c479b7e1b1e8df2f5dd42HP Security Bulletin - Potential security vulnerabilities have been identified on HP-UX running Kerberos. These vulnerabilities could be exploited by remote unauthenticated users to create a Denial of Service (DoS) or to execute arbitrary code.
d984b720f3465fb1ba1d035590eb1f5358e3f95c97706772318b2e7bebdc4d2cISC BIND 9 remote dynamic update message denial of service proof of concept exploit.
799163d3096ac6417859d8336c72804bd82e0fdfa3175c781142368b9092f046EPSON Status Monitor 3 suffers from a local privilege escalation vulnerability.
bdd59a07432408d0d4b87e1fa1270c97e9c24ead8095fa5897699959c52a76b1Harald Scan is a Bluetooth discovery scanner. It determines Major and Minor device classes according to the Bluetooth SIG specification and attempts to resolve a device's MAC address to the largest known vendor/MAC address list. Written in Python.
0c7e222b070b432f4b5895dfde33b81c79d05a64572b038602aa78210012b137Cisco Security Advisory - Recent versions of Cisco IOS Software support RFC4893 ("BGP Support for Four-octet AS Number Space") and contain two remote denial of service (DoS) vulnerabilities when handling specific Border Gateway Protocol (BGP) updates. These vulnerabilities affect only devices running Cisco IOS Software with support for four-octet AS number space (here after referred to as 4-byte AS number) and BGP routing configured. The first vulnerability could cause an affected device to reload when processing a BGP update that contains autonomous system (AS) path segments made up of more than one thousand autonomous systems. The second vulnerability could cause an affected device to reload when the affected device processes a malformed BGP update that has been crafted to trigger the issue.
2c460f0ad63f0f3a8e738688ac261e9554aca26b3fa84095b3b63941224e5828NTSOFT BBS E-Market Professional suffers from cross site scripting vulnerabilities.
3003fe2a354ba57934d0f3474ce9a2611490bf3048c2ef8db911956cb5c9fe69Mandriva Linux Security Advisory 2009-181 - The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009. This update provides fixes for this vulnerability.
827d6e18872f55d13f65677eede4df6fe9b092aacbeeaf3a59f177de8bea2b66Mandriva Linux Security Advisory 2009-180 - Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a.xbm file. This update provides fixes for this vulnerability.
74712dd47e7696f97bd871d718e4af6159e0a39ef1e72cd819a4035b7d6cd17eMandriva Linux Security Advisory 2009-179 - Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information. This update provides fixes for this vulnerability.
b6f23056ca397f0cabf1b9e791a0d3dc4c26f03d88d9917816139a0e3686da9bMandriva Linux Security Advisory 2009-178 - Due to incorrect buffer limits and related bound checks Squid is vulnerable to a denial of service attack when processing specially crafted requests or responses. Due to incorrect data validation Squid is vulnerable to a denial of service attack when processing specially crafted responses. This update provides fixes for these vulnerabilities.
45c9befe62afdc03cc523a9068155394f42676b1fb8969b2f7ad321f2b0f409a
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed