Unfixed XSS vulnerability at www.polksheriff.org

Security researcher amele2, has submitted on 14/02/2007 a cross-site-scripting XSS vulnerability affecting www.polksheriff.org, which at the time of submission ranked 129339 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/02/2007. It is...

GLSA-200701-14 : Mod_auth_kerb: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200701-14 Modauthkerb: Denial of Service Modauthkerb improperly handles component byte encoding in the dergetoid function, allowing for a buffer overflow to occur if there are no components which require more than one byte for...

Apple WebKit build 18794 - WebCore Remote Denial of Service

source: https://www.securityfocus.com/bid/22059/info Apple WebKit is prone to a denial-of-service vulnerability. Attackers may exploit this issue by enticing victims into opening a malicious HTML document with an application using the affected framework. Successful exploits will result in...

IBM DB2 < 8.1 Fix Pack 14 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host may crash when processing specially crafted SQLJRA packets because it attempts to dereference a NULL pointer in the sqledb2raasrecvrequest function. A remote attacker can send such packets without authentication to...

genesistrader10.txt

GenesisTrader v1.0 ------------------ Vendor site: http://www.genesis-php.com/ Product: GenesisTrader v1.0 Vulnerability: Source Code Disclosure, Arbitrary File Upload & XSS Credits: MrKaLiMaN Reported to Vendor: 06/12/06 Public disclosure: 14/12/06 Description: ------------ Source Code...

CVE-2006-6473

CVE-2006-6473 involves Xerox WorkCentre and WorkCentre Pro products. The connected documents indicate multiple unspecified vulnerabilities in these devices prior to 12.050.03.000, 13.x prior to 13.050.03.000, and 14.x prior to 14.050.03.000, with unknown impact and attack vectors. The issues are ...

Immunity Canvas: MS06_070

Name| ms06070 ---|--- CVE| CVE-2006-4691 Exploit Pack| CANVAS Description| Microsoft Workstation Service Overflow Notes| CVE Name: CVE-2006-4691 VENDOR: Microsoft Notes: This exploit actually needs a domain reachable from the attacked machine Platforms Tested: MSADV: MS06-070 References:...

Solaris 10 (sparc) : 119548-14 (deprecated)

GNOME 2.6.0: Gnome Multi-protocol instant messaging client Patch. Date this patch was last updated by Sun : Dec/14/09 This plugin has been deprecated and either replaced with individual 119548 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 8 (sparc) : 116292-14

Sun One Application Server 7.0: Proxy Plugin Patch. Date this patch was last updated by Sun : Oct/08/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

Solaris 8 (sparc) : 114045-14

Security 3.3.4.8: NSPR 4.1.6 / NSS 3.3.4.8. Date this patch was last updated by Sun : Nov/08/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (x86) : 116293-14

Sun One Application Server 7.0x86: Proxy Plugin Patch. Date this patch was last updated by Sun : Oct/08/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 115158-14

X11 6.6.1: xscreensaver patch. Date this patch was last updated by Sun : Jul/21/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 5.10 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.9 (x86) : 120190-19

StarSuite 8 Solarisx86: Update 14. Date this patch was last updated by Sun : Sep/11/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

phpQuiz 0.1 (pagename) Remote File Include Vulnerability

No description provided by source. SolpotCrew Community phpQuiz v0.01 design and coding byJule Slootbeek pagename Remote File Inclusion Download file : http://www.furor-normannicus.de/phpQuiz/download/phpQuiz.zip Bug Found By :Solpot a.k.a k. Hasibuan 14-09-2006 contact: [email protected]...

GLSA-200608-14 : DUMB: Heap buffer overflow

The remote host is affected by the vulnerability described in GLSA-200608-14 DUMB: Heap buffer overflow Luigi Auriemma found a heap-based buffer overflow in the itreadenvelope function which reads the envelope values for volume, pan and pitch of the instruments referenced in a '.it' Impulse Track...

PocketPC Mms Composer - 'WAPPush' Denial of Service

/ This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org http://www.mulliner.org/pocketpc/ NotfiFlood - a...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...

PHP Blue Dragon CMS 2.9.1 - template.php File Inclusion

PHP Blue Dragon CMS 2.9.1 - template.php File Inclusion ----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch:...

SUSE-SA:2006:021: MozillaFirefox,mozilla

The remote host is missing the patch for the advisory SUSE-SA:2006:021 MozillaFirefox,mozilla. A number of security issues have been fixed in the Mozilla browser suite and the Mozilla Firefox browser. These problems could be used by remote attackers to gain privileges, gain access to confidential...