Half-Life CSTRIKE Server <= 1.6 (non steam) Denial of Service Exploit

No description provided by source. !/usr/bin/perl Server must not be running steam. /str0ke Half-Life engine remote DoS exploit bug found by Firestorm tested against cstrike 1.6 Windows build-in server, cstrike 1.6 linux dedicated server use IO::Socket; die "usage: ./csdos host" unless $ARGV0;...

CVE-2005-3931

CVE-2005-3931 : A SQL injection flaw exists in default.asp of ASP-Rider 1.6 , allowing remote attackers to inject arbitrary SQL commands via the HTTP Referer. The vulnerability targets the input handling in that page/file, enabling unauthorized data access or manipulation as described in the publ...

CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

CVE-2005-3841

CVE-2005-3841 is a cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400) and possibly other versions. The flaw allows remote attackers to inject arbitrary web script or HTML through the searchfor parameter. According to the provided data, the impact is limited to confidentiality a...

kPlaylist XSS vuln.

kPlaylist XSS vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Vendor:http://www.kplaylist.net/ affected version: Tested on 1.6 build 400 ,can be affected till last 1.6 build 411 . Vuln. Description Input passed to the search parameters isn't properly sanitised before being returned to the user...

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as...

clarolineVulns.txt

This is a multi-part message in MIME format. ------=NextPart000001B01C54B56.DF10D4A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Zone-H Research Center Security Advisory 200501 http://fr.zone-h.org Date of release: 27/04/2005 Software: Claroline...

CVE-2000-1226

Snort 1.6 is affected. In straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging, remote attackers can cause a denial of service (crash) by sending non-IP protocols that Snort cannot recognize, as demonstrated by an nmap protocol scan. This vulnerability is docu...

[Full-disclosure] Dokeos - Multiple Vulnerabilities

2 months ago we published an advisory about the Claroline application: http://www.zone-h.org/advisories/read/id=7472 Dokeos www.dokeos.com 1.5.5 has the same vulnerabilities than Claroline because it was based on it, but not all of them: there are 3 file inclusion vulnerabilities, and some of the...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

WowBB view_user.php SQL Injection Vulnerability

An attacker can exploit this vulnerability to gain admin username and password. http://www.wowbb.com/ Vulnerable versions: 1.6 1.61 1.62 Proof of concept: http://www.example.com/wowbb/viewuser.php?list=1&letter=&sortby='SQL Injection...

CVE-2005-1377

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors...

ZRCSA-200501 - Multiple vulnerabilities in Claroline

Zone-H Research Center Security Advisory 200501 http://fr.zone-h.org Date of release: 27/04/2005 Software: Claroline www.claroline.net Affected versions: 1.5.3 1.6 beta 1.6 Release Candidate 1 probably previous versions too Risk: High Discovered by: Kevin Fernandez "Siegfried" Mehdi Oudad...

CVE-2002-1652

CVE-2002-1652 concerns CGIEmail’s CGICso (cgicso.c) in CGIEmail 1.6. The issue is a buffer overflow in cgicso.c triggered by a long query parameter, leading to remote denial of service and the possibility of arbitrary code execution. The OpenVAS entry corroborates a vulnerability in CGIEmail’s cg...

CVE-2005-0674

The CVE-2005-0674 entry concerns the paBox 1.6 News module, where a cross-site scripting (XSS) flaw exists in the News module’s handling of the hidden text parameter in an HTTP POST. The connected documents corroborate an XSS issue affecting paBox/Nuke-based deployments (e.g., Nessus plugin refer...

[XSS] paBox 1.6

Just wanted to let it be known seeing as i havent seen any info on this yet, ive discovered a cross scripting problem in PABox 1.6 http://phpnuke.org/modules.php?name=News&file=article&sid=5065 they give a demo page of pabox there. if you take the default form used for the shoutbox, there are...

CVE-2005-0674

Cross-site scripting XSS vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request...

CVE-2004-1629

CVE-2004-1629 describes multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier, allowing remote attackers to execute arbitrary SQL statements. The available sources list this as a remote vulnerability with network attack vector and no authentication required, but the connected doc...

CVE-2004-1629

Multiple SQL injection vulnerabilities in Dwcarticles 1.6 and earlier allow remote attackers to execute arbitrary SQL statements...

CVE-2002-1490

CVE-2002-1490 affects NetBSD 1.4–1.6 beta. The vulnerability is triggered by a sequence of TIOCSCTTY ioctl calls that overrun a structure counter, resetting it to zero and freeing memory still in use, leading to a local denial of service via kernel panic. The connected documents confirm the issue...