Unfixed XSS vulnerability at morenumbers.net

Security researcher MaXWeL, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting morenumbers.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Re: [Full-disclosure] firefox 2.0.0.2 crash

On Fri, 09 Mar 2007 20:31:40 +0200, =?ISO-8859-1?Q?T=F5nu?= Samuel said: http://people.zoy.org/sam/firefox-crash-save-session-before-clicking.gif Cute. The 16-bit height and width fields in the GIF are: 0x0048 = decimal 72 0x8004 = decimal whoops. ;...

Unfixed XSS vulnerability at www.kimyasanal.net

Security researcher Dylebron, has submitted on 16/02/2007 a cross-site-scripting XSS vulnerability affecting www.kimyasanal.net, which at the time of submission ranked 256423 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2007. It is...

Unfixed XSS vulnerability at icservices.epfl.ch

Security researcher SCRiPToRiuM, has submitted on 16/02/2007 a cross-site-scripting XSS vulnerability affecting icservices.epfl.ch, which at the time of submission ranked 12729 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2007. It is...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

CA BrightStor ARCServe BackUp LGServer资源耗尽漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup在处理用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器消耗大量磁盘资源。 每次用户试图验证到LGSERVER.EXE都会在D:\CABABLDdata\Server\data\transfer中创建一个文件。该文件扩展名为.USX，格式类似于RWXXX.usx，其中X为0-9或A-F的值。 在协商期间16进制地址（DWORD）0x15到0x18上的第三个报文中值为0x00 0x00 0x00...

WMF CreateBrushIndirect vulnerability (DoS)

The following WMF exploit appeared on milw0rm today: http://www.milw0rm.com/exploits/3111 The vulnerability is a result of the WMF parser passing a value from the file as a pointer argument to the CreateBrushIndirect function. The function dereferences the pointer and dies with an access violatio...

Microsoft Windows资源管理器及媒体播放器拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的资源管理器和媒体播放器在处理畸形MID及WMV文件时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 如果用户受骗使用Windows所捆绑的资源管理器或媒体播放器打开了恶意的WMV或MID文件的话，就会导致explorer.exe或mplayer2.exe进程崩溃。 Microsoft Windows XP SP2 Microsoft Windows 2000SP4 Microsoft Media Player 6.4 Microsoft Media Player 10.0...

GLSA-200612-16 : Links: Arbitrary Samba command execution

The remote host is affected by the vulnerability described in GLSA-200612-16 Links: Arbitrary Samba command execution Teemu Salmela discovered that Links does not properly validate 'smb://' URLs when it runs smbclient commands. Impact : A remote attacker could entice a user to browse to a special...

Solaris 5.8 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 6 (sparc) : 112327-27

Sun GigaSwift Ethernet 1.0: driver patch. Date this patch was last updated by Sun : Sep/16/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 5.7 (x86) : 108157-16

SunScreen EFS 3.0b Intel miscellaneous fixes.. Date this patch was last updated by Sun : Jan/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.8 (sparc) : 113246-02

Topology Reporter 1.0: Support for Leadville 6.1.2, StorADE bug fi. Date this patch was last updated by Sun : Oct/16/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.7 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.9 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (x86) : 108157-16

SunScreen EFS 3.0b Intel miscellaneous fixes.. Date this patch was last updated by Sun : Jan/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (sparc) : 111526-16

SunForum 3.2: fixes and enhancements. Date this patch was last updated by Sun : Nov/30/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

DSA-1198-1 python2.3

Bulletin has no description...

CVE-2006-3647: Undefined Security Weakness

Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than...

CVE-2006-5013

CVE-2006-5013 affects Sun Solaris 10 (pre-patch 118855-16) on x64 with IPv6. A crafted IPv6 packet can trigger a kernel panic, causing denial of service. The vulnerability is tied to the IPv6 handling within the Solaris kernel. Exploitation status is not detailed in the provided documents. Remedi...