Unfixed XSS vulnerability at icservices.epfl.ch

Security researcher SCRiPToRiuM, has submitted on 16/02/2007 a cross-site-scripting XSS vulnerability affecting icservices.epfl.ch, which at the time of submission ranked 12729 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2007. It is...

Unfixed XSS vulnerability at www.kimyasanal.net

Security researcher Dylebron, has submitted on 16/02/2007 a cross-site-scripting XSS vulnerability affecting www.kimyasanal.net, which at the time of submission ranked 256423 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2007. It is...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

CA BrightStor ARCServe BackUp LGServer资源耗尽漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup在处理用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器消耗大量磁盘资源。 每次用户试图验证到LGSERVER.EXE都会在D:\CABABLDdata\Server\data\transfer中创建一个文件。该文件扩展名为.USX，格式类似于RWXXX.usx，其中X为0-9或A-F的值。 在协商期间16进制地址（DWORD）0x15到0x18上的第三个报文中值为0x00 0x00 0x00...

WMF CreateBrushIndirect vulnerability (DoS)

The following WMF exploit appeared on milw0rm today: http://www.milw0rm.com/exploits/3111 The vulnerability is a result of the WMF parser passing a value from the file as a pointer argument to the CreateBrushIndirect function. The function dereferences the pointer and dies with an access violatio...

Microsoft Windows资源管理器及媒体播放器拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的资源管理器和媒体播放器在处理畸形MID及WMV文件时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 如果用户受骗使用Windows所捆绑的资源管理器或媒体播放器打开了恶意的WMV或MID文件的话，就会导致explorer.exe或mplayer2.exe进程崩溃。 Microsoft Windows XP SP2 Microsoft Windows 2000SP4 Microsoft Media Player 6.4 Microsoft Media Player 10.0...

GLSA-200612-16 : Links: Arbitrary Samba command execution

The remote host is affected by the vulnerability described in GLSA-200612-16 Links: Arbitrary Samba command execution Teemu Salmela discovered that Links does not properly validate 'smb://' URLs when it runs smbclient commands. Impact : A remote attacker could entice a user to browse to a special...

Solaris 5.9 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.8 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.8 (sparc) : 113246-02

Topology Reporter 1.0: Support for Leadville 6.1.2, StorADE bug fi. Date this patch was last updated by Sun : Oct/16/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.7 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.7 (x86) : 108157-16

SunScreen EFS 3.0b Intel miscellaneous fixes.. Date this patch was last updated by Sun : Jan/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (x86) : 108157-16

SunScreen EFS 3.0b Intel miscellaneous fixes.. Date this patch was last updated by Sun : Jan/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 6 (sparc) : 112327-27

Sun GigaSwift Ethernet 1.0: driver patch. Date this patch was last updated by Sun : Sep/16/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

DSA-1198-1 python2.3

Bulletin has no description...

CVE-2006-5013

CVE-2006-5013 affects Sun Solaris 10 (pre-patch 118855-16) on x64 with IPv6. A crafted IPv6 packet can trigger a kernel panic, causing denial of service. The vulnerability is tied to the IPv6 handling within the Solaris kernel. Exploitation status is not detailed in the provided documents. Remedi...

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete http://www.xsec.org Overview: On running windows system, you can't delete, format and change system dirver. \ VMware register a COM Object use for Virtual Disk, but it's very danger. \ I don't know how to name this issue. If you allow...

docpile:we <= 0.2.2 (INIT_PATH) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== docpile:we = 0.2.2 INITPATH Remote File Inclusion Vulnerabilities ===================================================================== TiTLE: docpile:we v0.2.2 INITPATH...

CVE-2006-3463

The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...