Asterisk Project Security Advisory - An attacker attempting to negotiate T.38 over SIP can remotely crash Asterisk by modifying the FaxMaxDatagram field of the SDP to contain either a negative or exceptionally large value. The same crash occurs when the FaxMaxDatagram field is omitted from the SDP as well.
e389de5a471316312db8c85329ef64fc51d31e57f6900226fbee9f94d1d8b6deRealAdmin suffers from a remote blind SQL injection vulnerability.
11c816cb52afd81ad3daa1ca4f6048f55093dfa99c1c5feea6838715a311cafcHP Security Bulletin - A potential security vulnerability has been identified with HP-UX running HP CIFS Server (Samba). The vulnerability could be exploited to gain remote unauthorized access.
8134d70d0b7e85177ea8643f05167f8067e6c7037962fb2bd562a83c4cffb05bCMS Boys suffers from multiple remote SQL injection vulnerabilities.
05fd1fbdd84777b0ce974aab67299328ee13b23066e9749a4c91666ffe90bf42CityAdmin suffers from a remote blind SQL injection vulnerability.
2916903025ae8423034bc22c6f4f575fcef225be6d7254f4ab9a1bd6400d6261OpenCart suffers from a cross site request forgery vulnerability.
97c3de97a1c9de71eb4c67b9776d82e7d65bbc6ff5559ebd6e57944b4714226aIbibo.com, India’s first entertainment and talent based social network, suffers from a cross site scripting vulnerability.
7440448e4531773332709a84a44434ff06f61d153089063599e75ce3c6d5f921Debian Linux Security Advisory 1986-1 - Several vulnerabilities have been discovered in Moodle, an online course management system.
20d79bb42bc33c257cf9cb499cac721218e6dab10136e278e92d9c6569d789a0KubeLance version 1.7.6 suffers from a cross site request forgery vulnerability.
f7181d251941f62e5919135ca2f9decc52dfceca2e229b6af3bc07a4242f1298MYRE Classified suffers from a remote SQL injection vulnerability.
07ce77d3a815f0c528f49744cb5e9c32758d97935d46b87f5a1b69aba9ca0726Dlili suffers from a remote SQL injection vulnerability.
39bc8e867cfdf804a4eef6d2429f88e99de10285f50e681b5d75161084e6a5cbTinypug versions 0.9.5 and below suffer from cross site request forgery and cross site scripting vulnerabilities.
a01fc3dd1197cdeee84f6202482ccc79cdcb7aa9e0ce6801fe528afbb637238bGCP suffers from a local file inclusion vulnerability.
d3b794a650400329b93749ecddb13854125b5c0d30eca339adc968c0924b8591Debian Linux Security Advisory 1987-1 - Li Ming discovered that lighttpd, a small and fast webserver with minimal memory footprint, is vulnerable to a denial of service attack due to bad memory handling. Slowly sending very small chunks of request data causes lighttpd to allocate new buffers for each read instead of appending to old ones. An attacker can abuse this behaviour to cause denial of service conditions due to memory exhaustion.
9e1623da1bd15bd5b8ce79ac7ac69911fec03e3e6687cfa18036dabfeca01b59myBusinessAdmin suffers from a remote blind SQL injection vulnerability in content.php.
7fe6f690be4e35487cf4951045cb25b3b9817f4910cb2dde4b7ab7fb7dabb204AIX RPC.cmsd remote stack buffer overflow proof of concept exploit.
7c8e41a206c1c2240e87d6853f2c71873a26177a618a781f20802d31ab305649Deepburner Pro version 1.9.0.228 dbr file universal buffer overflow exploit.
93a19afa970f1ffa7953e6a989001556ec9f30f1effdd22bf0222dd39eb76b95
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed