7988 matches found
1C: Arcadia Internet Store 1.0 Show Path Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2904/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of the components of this...
freeFTPd 1.0 Username Overflow
No description provided by source. $Id: freeftpduser.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Windows XP/2000 - Help File Relative Path Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by enticing a victim to load help files when workin...
Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE...
PrivaShare <= 1.3 - Denial of Service Exploit
No description provided by source. / PrivaShare TCP/IP DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Tested on Windows2000 SP4 Greats: Infam0us Gr0up Team/member,and ll of u..take care! Info: -...
HP-UX 11,Linux kernel 2.4,Windows 2000/NT 4.0,IRIX 6.5 Small TCP MSS DoS
No description provided by source. source: http://www.securityfocus.com/bid/2997/info A potential denial of service vulnerability exists in several TCP stack implementations. TCP has a MSS maximum segment size option that is used by a TCP client to announce to a peer the maximum amount of TCP dat...
Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7102/info The Microsoft Windows 2000 Help facility does not perform sufficient bounds checking on .cnt files. If a .cnt file containing an unusually long :Link URI was opened by the Windows Help facility, a buffer would b...
Omni-NFS Server Buffer Overflow
No description provided by source. $Id: xlinknfsd.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Opera 6.0.x FTP View Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5401/info A cross-site scripting vulnerability in Opera has been reported. When viewing the contents of an FTP site as web content, the data within title tags is not sanitized. An attacker may embed javascript between ope...
Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes...
MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution
No description provided by source. source: http://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsof...
Computer Associates License Client GETCONFIG Overflow
No description provided by source. $Id: calicclntgetconfig.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow
No description provided by source. $Id: freesshdkeyexchange.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Apple QuickTime 5.0 Content-Type Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4064/info Apple QuickTime is a freely available media player. It runs on a number of platforms including MacOS and Windows 9x/ME/NT/2000/XP operating systems. Apple QuickTime For Windows does not perform sufficient bounds...
Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7930/info A vulnerability has been discovered in Microsoft Windows 2000. The problem occurs in the Active Directory component and will result in a denial of service. An unauthenticated attacker could exploit this...
Snitz Forums 2000 3.x Members.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4558/info Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000 and MySQL. It i...
CVE-2014-2000
The CVE-2014-2000 issue affects 050 plus for Android (NTT Communications) versions 4.2.0 and earlier. It is an information management vulnerability that causes the product to output pieces of its stored information to the device’s system log file. Consequently, any Android app with permission to ...
Microsoft SQL 2000 Slammer Worm Denial of Service (CVE-2002-0649)
Slammer is a memory resident worm targeted to attack Microsoft SQL 2000. By propagating rapidly, the worm can cause a denial of service condition on affected targets...
大汉版通政府信息公开系统SQL注射2
简要描述： SQL 详细说明： 政府信息公开系统 某处sql注射漏洞 另一个文件里的参数 注入点 zfxxgk/serviceobjectinfo.jsp?servicebm= servicebm过滤不严存在注射 政府网站案例 sqlmap.py -u "http://xxgk.sihong.gov.cn/zfxxgk/serviceobjectinfo.jsp?s ervicebm=" --is-dba --dbs --- Place: GET Parameter: servicebm Type: boolean-based blind Title: AND boolean-based...
大汉版通政府信息公开系统SQL注射
简要描述： 政府信息公开系统 详细说明： 政府信息公开系统 某处sql注射漏洞 注入点 zfxxgk/subjectinfo.jsp?subjectbm= subjectbm参数过滤不严，导致注入 政府网站案例 sqlmap.py -u "http://xxgk.sihong.gov.cn/zfxxgk/subjectinfo.jsp?subjectbm=" --is-dba --dbs payload Place: GET Parameter: subjectbm Type: boolean-based blind Title: AND boolean-based blind -...