Snitz Forums 2000 Forum.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20004/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This could allow an attacker to steal cookie-based authentication credentials and...

Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages DoS Exploit

No description provided by source. / HOD-icmp-attacks-poc.c: 2005-04-15: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-019 CISCO:20050412 ICMP attacks against TCP Proof-of-Concept .:: houseofdabus ::. for more details: http://www.livejournal.com/users/houseofdabus...

Microsoft Windows 2000 - Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8397/info A problem has been identified in the RSVP Server for Microsoft Windows 2000 that may allow an attacker to hijack management of the network. This could allow an attacker control of network Quality of Service...

Cesar FTP 0.99g MKD Command Buffer Overflow

No description provided by source. $Id: cesarftpmkd.rb 11799 2011-02-23 00:58:54Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Windows 2000 Lanman Denial of Service Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and Kernel mode memory usage...

CVE-2014-2000

The CVE-2014-2000 issue affects 050 plus for Android (NTT Communications) versions 4.2.0 and earlier. It is an information management vulnerability that causes the product to output pieces of its stored information to the device’s system log file. Consequently, any Android app with permission to ...

Microsoft SQL 2000 Slammer Worm Denial of Service (CVE-2002-0649)

Slammer is a memory resident worm targeted to attack Microsoft SQL 2000. By propagating rapidly, the worm can cause a denial of service condition on affected targets...

大汉版通政府信息公开系统SQL注射2

简要描述： SQL 详细说明： 政府信息公开系统 某处sql注射漏洞 另一个文件里的参数 注入点 zfxxgk/serviceobjectinfo.jsp?servicebm= servicebm过滤不严存在注射 政府网站案例 sqlmap.py -u "http://xxgk.sihong.gov.cn/zfxxgk/serviceobjectinfo.jsp?s ervicebm=" --is-dba --dbs --- Place: GET Parameter: servicebm Type: boolean-based blind Title: AND boolean-based...

大汉版通政府信息公开系统SQL注射

简要描述： 政府信息公开系统 详细说明： 政府信息公开系统 某处sql注射漏洞 注入点 zfxxgk/subjectinfo.jsp?subjectbm= subjectbm参数过滤不严，导致注入 政府网站案例 sqlmap.py -u "http://xxgk.sihong.gov.cn/zfxxgk/subjectinfo.jsp?subjectbm=" --is-dba --dbs payload Place: GET Parameter: subjectbm Type: boolean-based blind Title: AND boolean-based blind -...

CVE-2011-5279

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...

Crlf injection

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...

CVE-2011-5279

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...

CVE-2011-5279

The CVE-2011-5279 entry concerns CRLF injection in the CGI component of Microsoft Internet Information Services (IIS) 4.x and 5.x running on Windows NT/2000. The vulnerability arises when a newline character in an HTTP header enables an attacker to modify arbitrary uppercase environment variables...

Microsoft Windows 2000 Troubleshooter ActiveX Control Buffer Overflow - Ver2 (CVE-2003-0662)

A buffer overflow vulnerability has been reported in Microsoft Windows 2000. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft RPCSS DCOM Interface Privilege Escalation - Ver2 (CVE-2003-0605)

A privilege escalation vulnerability has been reported in Microsoft Windows 2000. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

CVE-2014-0349

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

Code injection

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

CVE-2014-0349

CVE-2014-0349 involves multiple unspecified vulnerabilities in the J2k-Codec JPEG 2000 decoding library (Windows). A crafted JPEG 2000 file may allow a remote attacker to execute arbitrary code with the privileges of the vulnerable application. Documents consistently describe remote code executio...

CVE-2014-0349

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

PT-2014-3579

Name of the Vulnerable Software and Affected Versions J2k-Codec affected versions not specified Description The issue involves multiple unspecified vulnerabilities that allow remote attackers to execute arbitrary code through a crafted JPEG 2000 file. Recommendations At the moment, there is no...