CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

CVE-2005-3961

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

CVE-2005-3955

Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...

CVE-2005-3957

Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors...

[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 913-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 913-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2005 http://www.debian.org/security/faq -...

CVE-2005-3704

CVE-2005-3704 describes a vulnerability in Mac OS X and OS X Server versions 10.4 through 10.4.3 where a remote attacker can spoof syslog messages by injecting control characters (e.g., newline) into log files. The description specifies this affects the system log server and enables manipulation ...

CVE-2005-3702

CVE-2005-3702 affects Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3. The vulnerability allows remote attackers to cause files to be downloaded to locations outside the download directory by supplying a long file name. The connected documents provide the affected products and the exact impa...

CVE-2005-3705

CVE-2005-3705 concerns a heap-based buffer overflow in WebKit used by Mac OS X and OS X Server 10.3.9 and 10.4.3, including Safari. The underlying issue is in WebKit’s handling of certain inputs, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Affected produc...

CVE-2005-3700

Technical details for CVE-2005-3700 are not publicly provided in the supplied documents. Monitor for updates when additional information becomes available.

CVE-2005-2757

CVE-2005-2757 affects Mac OS X and OS X Server 10.4–10.4.3. The issue is a heap-based buffer overflow in CoreFoundation, exploitable by remote attackers to run arbitrary code through how URLs are validated. The description in the connected documents confirms the vulnerability and affected compone...

randshopSQL.txt

Randshop all versiyon Sql İnjection Website:http://www.randshop.com Demo:http://www.randshop.com/demoshop/ ------------------------------------------------------------------- Credit:Liz0ziM & wannacut Mail:[email protected] www.biyo.tk...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

Lore SQL inj. vuln.

Lore SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/lore-sql-inj-vuln.html Vendor:http://www.pineappletechnologies.com/products/lore/ affected version: Tested on 1.5.4 Product Description: Lore is a professional knowledge base...

Panda Remote Heap Overflow

Date November 29, 2005 Vulnerability The Panda Antivirus Library provides file format support for virus analysis. During decompression of ZOO files Panda is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remote...

DSA-913-1 gdk-pixbuf - several

Bulletin has no description...

CVE-2005-3912

Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service crash or memory consumption and possibly execute arbitrary code via format string specifiers in the usernam...

CVE-2005-3917

SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2005-3919

Cross-site scripting XSS vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields in 1 UCP.php and 2 SendPm.php...

Immunity Canvas: WEBMIN

Name| webmin ---|--- CVE| CVE-2005-3912 Exploit Pack| CANVAS Description| Webmin Remote Exploit Notes| CVE Name: CVE-2005-3912 VENDOR: Webmin.com OSVDB: Repeatability: References: http://www.dyadsecurity.com/webmin-0001.html - http://www.dyadsecurity.com/perl-0002.html CVE Url:...