Mandriva Linux Security Advisory : rsh (MDVSA-2008:191)

A vulnerability in the rcp protocol was discovered that allows a server to instruct a client to write arbitrary files outside of the current directory, which could potentially be a security concern if a user used rcp to copy files from a malicious server CVE-2004-0175. This issue was originally...

Important: Red Hat Security Advisory: giflib security update

Updated giflib packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The giflib packages contain a shared library of functions for loading and saving GIF ima...

giflib security update

4.1.3-7.1.el53.1 - cve-2005-3350, cve-2005-2974...

webClassifieds 2005 (Auth Bypass) Insecure Cookie Handling Vuln

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:webClassifieds© 2005 Insecure Cookie Handling Vulnerability Vendor: www.webscribble.com Software: webClassifieds© 2005 author: ThE g0bL!N Home: WWW.h4ckf0ru.com...

webClassifieds 2005 - (Authentication Bypass) Insecure Cookie Handling

webClassifieds 2005 - Authentication Bypass Insecure Cookie Handling ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:webClassifieds© 2005 Insecure Cookie Handling Vulnerability Vendor: www.webscribble.com Software: webClassifieds© 2005...

webClassifieds 2005 - (Authentication Bypass) Insecure Cookie Handling

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:webClassifieds© 2005 Insecure Cookie Handling Vulnerability Vendor: www.webscribble.com Software: webClassifieds© 2005 author: ThE g0bL!N Home: WWW.h4ckf0ru.com -----------------------------...

webClassifieds 2005 Insecure Cookie

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:webClassifieds© 2005 Insecure Cookie Handling Vulnerability Vendor: www.webscribble.com Software: webClassifieds© 2005 author: ThE g0bL!N Home: WWW.h4ckf0ru.com ----------------------------- Iam...

webClassifieds 2005 (Auth Bypass) Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications =============================================================== webClassifieds 2005 Auth Bypass Insecure Cookie Handling Vuln =============================================================== Tybe:webClassifieds© 2005 Insecure Cookie Handli...

ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection

riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits: YES Reported: 18.03.2009 Vendor...

Google Appliance ProxyStyleSheet Command Execution

This module exploits a feature in the Saxon XSLT parser used by the Google Search Appliance. This feature allows for arbitrary java methods to be called. Google released a patch and advisory to their client base in August of 2005 GA-2005-08-m. The target appliance must be able to connect back to...

Mandriva Update for libcdaudio MDVSA-2008:233 (libcdaudio)

Check for the Version of libcdaudio OpenVAS Vulnerability Test Mandriva Update for libcdaudio MDVSA-2008:233 libcdaudio Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

JVN#33846134 Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software, from JustSystems Corporation, contains an issue in the reading of Rich Text Files resulting in a buffer overflow vulnerability. When a user opens a specially crafted file locally or through a website, arbitrary code may be executed with privleges of...

CVE-2005-4880

The CVE-2005-4880 entry concerns Jax Guestbook 3.1 and 3.31, which stores sensitive information under the web root without proper access control. The vulnerability enables remote attackers to obtain user IP addresses by directly requesting (1) guestbook, (2) guestbook_ips2block, (3) ips2block, or...

CVE-2005-4879

The CVE-2005-4879 entry describes XSS vulnerabilities in the PHP script jax_guestbook.php of Jax Guestbook, affecting versions 3.1, 3.31, and 3.50. The weaknesses arise from unsanitized user input in parameters such as gmt_ofs and language (and page per related CVEs), allowing remote attackers to...

Ubuntu: Security Advisory (USN-560-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QIP Version Detection

This script detects the QIP version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbqipdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ QIP Version Detection Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

QIP Version Detection

This script detects the QIP version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800540";...

Sql injection

SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE-2005-3509...

CVE-2009-0769

QIP 2005 build 8082 allows remote attackers to cause a denial of service CPU consumption and application hang via a crafted Rich Text Format RTF ICQ message, as demonstrated by an \rtf\pict&& message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be...

Design/Logic Flaw

QIP 2005 build 8082 allows remote attackers to cause a denial of service CPU consumption and application hang via a crafted Rich Text Format RTF ICQ message, as demonstrated by an \rtf\pict&& message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be...