CAN-2005-2871

Summary (CVE-2005-2871) : A buffer/heap overflow in IDN hostname handling affects Mozilla Firefox and derivatives (e.g., Thunderbird). Improper processing of international domain names (IDN) can allow a remote attacker to cause a crash or execute arbitrary code in the user’s security context. The...

CVE-2005-1828

creationtimestamp| type| source ---|---|--- 2024-02-13 19:17:16+00:00| seen| https://t.me/ctinow/184056...

CVE-2005-2059

creationtimestamp| type| source ---|---|--- 2024-02-08 23:16:49+00:00| seen| https://t.me/ctinow/181689...

CVE-2005-2293

creationtimestamp| type| source ---|---|--- 2024-02-08 23:16:48+00:00| seen| https://t.me/ctinow/181688...

CVE-2005-1141

creationtimestamp| type| source ---|---|--- 2024-02-08 21:16:23+00:00| seen| https://t.me/ctinow/181631...

CVE-2005-0253

creationtimestamp| type| source ---|---|--- 2024-01-26 23:16:27+00:00| seen| https://t.me/ctinow/174526...

CVE-2005-0252

creationtimestamp| type| source ---|---|--- 2024-01-26 23:16:24+00:00| seen| https://t.me/ctinow/174524...

CVE-2005-1880

creationtimestamp| type| source ---|---|--- 2024-01-26 21:16:17+00:00| seen| https://t.me/ctinow/174474...

Malicious code in wlwz-2312-2005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dede194e824987083bdcc223f15ac57d3a85166a7a6175b6214123f4a639a3f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-355 Malicious code in wlwz-2312-2005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dede194e824987083bdcc223f15ac57d3a85166a7a6175b6214123f4a639a3f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2005-1125

PoC exploit for CVE-2005-1125. The exploit targets a vulnerability in the Libsafe library, which is a safety net for applications to prevent buffer overflows. The exploit is designed to bypass the Libsafe protection and execute arbitrary code. The repository contains a Makefile that builds the...

CVE-2005-10002

creationtimestamp| type| source ---|---|--- 2023-10-29 17:18:43+00:00| seen| https://t.me/cibsecurity/73117...

CVE-2005-10002

The CVE-2005-10002 issue affects the almosteffortless secure-files Plugin (WordPress) up to version 1.1. The vulnerability resides in the sf_downloads function within secure-files.php, where manipulation of the downloadfile argument enables path traversal. A fixed version exists: upgrade to versi...

CVE-2023-2005 Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability

Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID 202306261202 ; Nessus: before Plugin Feed ID 202306261202 ; Security Center: before Plugin Feed ID 202306261202 . This vulnerability could allow a malicious actor with...

CVE-2023-2005

This CVE affects Tenable.Io, Nessus, and Tenable Security Center prior to Plugin Feed ID #202306261202. The issue enables a user with scan-target permissions to place a binary in a specific filesystem location to escalate privileges via the impacted plugin. Remediation per PT-2023-17405 recommend...

Bejtlich Skills and Interest Radar from July 2005

This is unusual. I found this "skills and interest radar" diagram I created in July 2005. It looks like my attempt to capture and prioritize technical interests. At the time I was about to start consulting on my own, IIRC. Copyright 2003-2020 Richard Bejtlich and TaoSecurity...

SUSE CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

Debian: Security Advisory (DSA-887-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K60565503: OpenJDK vulnerability CVE-2005-1080

Security Advisory Description Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file. CVE-2005-1080 Impact There is no impact; F5...

K4256: RADIUS integer overflow vulnerability CAN-2005-0108

Security Advisory Description Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument. Note: Versions that a...