1284 matches found
CVE-2007-4580
Buffer underflow in redlight.sys (BufferZone 2.1–2.5) can be triggered by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler with a large FsSetDirectoryInformation subcode, leading to a denial of service and potentially arbitrary code execution on local access. Affected...
[SECURITY] Fedora Core 6 Update: ipsec-tools-0.6.5-8.fc6
This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds: - setkey, a program to directly manipulate policies and SAs - racoon, an IKEv1 keying daemon...
OWASP Stinger - Filter Bypass
source: https://www.securityfocus.com/bid/25294/info OWASP Stinger is prone to a filter-bypass weakness because the application fails to properly handle certain input. Since the OWASP Stinger project is a software module designed to be incorporated into other applications, this weakness may be...
CVE-2007-4167
PHP remote file inclusion vulnerability in catviewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the CatName parameter...
CVE-2007-4167
The CVE-2007-4167 entry describes a PHP remote file inclusion vulnerability in AL-Caricatier 2.5, where an attacker can cause arbitrary PHP code execution by supplying a URL in the CatName parameter of cat_viewed.php. The issue is rooted in including remote content via a user-controlled parameter...
AL-Caricatier V.2.5 Remote File Include
Discovred By : Hasadya Raed ---------------------------- Contact : [email protected] , [email protected] , [email protected] ---------------------------- Greetz : Muhammed Zeed , Alaadin Gamos ---------------------------- Script: AL-Caricatier,V.2.5 ---------------------------- Dork:...
CVE-2007-3711
Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets...
DEBIAN-CVE-2007-3508
Integer overflow in the processenvvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LDHWCAPMASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution...
PT-2007-1104 · Gnu · Glibc
Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.5-rc4 Description: The issue is related to an integer overflow in the process envvars function in elf/rtld.c in glibc. This might allow local users to execute arbitrary code via a large LD HWCAP MASK environment...
CVE-2007-3448
CVE-2007-3448 describes a cross-site scripting vulnerability in BugMall Shopping Cart 2.5 and earlier. An attacker can inject arbitrary script via the msgs parameter in index.php. The NVD entry notes this affects 2.5 and earlier versions; 4.0.2 and other versions might also be affected. The CVSS ...
CVE-2007-2052
Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in the comzoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 EXIFMakernote.php or 2 EXIF.php in classes/iptc/...
eIQnetworks Enterprise Security Analyzer 2.5 - Multiple Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/23454/info eIQnetworks Enterprise Security Analyzer is prone to multiple buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. Exploiting the...
CVE-2007-1919
Cross-site scripting XSS vulnerability in index.php in Arizona Dream Livre d'or livor 2.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
livor 2.5 Cross-Site Scripting Vulnerability
/ livor 2.5 Cross-Site Scripting Vulnerability / //Author: Arham Muhammad //Source: http://www.arizona-dream.com/Usa/Divers/scriptsphp/scripts/livor.zip //Vulnerable File: index.php //XsS: http://victim/path/index.php?page=///scriptscriptalert/xss/;/script //Risk: Session Hijack //Fix: The Variab...
livor-xss.txt
/ livor 2.5 Cross-Site Scripting Vulnerability / //Author: Arham Muhammad //Source: http://www.arizona-dream.com/Usa/Divers/scriptsphp/scripts/livor.zip //Vulnerable File: index.php //XsS: http://victim/path/index.php?page=//alert/xss/; //Risk: Session Hijack //Fix: The Variable "page" Need To Be...
Livor 2.5 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23353/info Livor is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Stack overflow
Stack-based buffer overflow in the filecompress function in minigzip Modules/zlib in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file argument...
