CVE-2006-7081

Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include parameter to 1 Include/lib.inc.php3 and 2 Include/variables.php3...

CVE-2006-3892

The CVE concerns EMC NetWorker Management Console (Legato NetWorker) running version 7.3.2 before Jumbo Update 1, where weak authentication permits remote attackers to execute arbitrary commands. Affected component is the Management Console server; root-equivalent commands could be run on connect...

CVE-2006-7096

CVE-2006-7096 describes a buffer overflow in dimension 3 engine (dim3) before or equal to version 1.5, specifically in the network_host_handle_join function in host.c. The overflow can be triggered by a long nickname, allowing remote attackers to cause an application crash and, potentially, arbit...

CVE-2006-7097

Technical details for CVE-2006-7097 are not publicly available in the provided documents. No concrete affected products, versions, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2006-7095

CVE-2006-7095 affects the Dimension 3 engine (dim3) up to version 1.5 and earlier. The root cause is an integer signedness error in network_receive_packet in socket.c, where data_len is cast to a signed short, enabling a potential buffer overflow. This can allow remote attackers to cause an appli...

madwifi <= 0.9.2.1 WPA/RSN IE Remote Kernel Buffer Overflow Exploit

No description provided by source. / ---- madwifi WPA/RSN IE remote kernel buffer overflow ------ expoit code by: sgrakkyu antifork.org -- 10/1/2007 CVE: 2006-6332 Laurent BUTTI, Jerome RAZNIEWSKI, Julien TINNES for wpa .... memcpybuf, se-sewpaie, se-sewpaie1 + 2 .... .... the function re-uses ar...

Madwifi 0.9.2.1 - WPARSN IE Remote Kernel Buffer Overflow

Madwifi 0.9.2.1 - WPARSN IE Remote Kernel Buffer Overflow / ---- madwifi WPA/RSN IE remote kernel buffer overflow ------ expoit code by: sgrakkyu antifork.org -- 10/1/2007 CVE: 2006-6332 Laurent BUTTI, Jerome RAZNIEWSKI, Julien TINNES for wpa .... memcpybuf, se-sewpaie, se-sewpaie1 + 2...

madwifi &lt;= 0.9.2.1 WPA/RSN IE Remote Kernel Buffer Overflow Exploit

No description provided by source. / ---- madwifi WPA/RSN IE remote kernel buffer overflow ------ expoit code by: sgrakkyu at antifork.org -- 10/1/2007 CVE: 2006-6332 Laurent BUTTI, Jerome RAZNIEWSKI, Julien TINNES for wpa .... memcpybuf, se-sewpaie, se-sewpaie1 + 2 .... .... the function re-uses...

Madwifi 0.9.2.1 - WPA/RSN IE Remote Kernel Buffer Overflow

/ ---- madwifi WPA/RSN IE remote kernel buffer overflow ------ expoit code by: sgrakkyu antifork.org -- 10/1/2007 CVE: 2006-6332 Laurent BUTTI, Jerome RAZNIEWSKI, Julien TINNES for wpa .... memcpybuf, se-sewpaie, se-sewpaie1 + 2 .... .... the function re-uses args in the stack before returning so...

CVE-2006-7094

CVE-2006-7094 affects ftpd used by Gentoo and Debian Linux. The root cause is that the daemon sets the group ID to the effective UID instead of the effective GID before executing /bin/ls, allowing remote authenticated users to list arbitrary directories with the privileges of gid 0 and potentiall...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2006-7089

CVE-2006-7089: A SQL injection vulnerability affects Ban 0.1 in the file connexion.php, exploitable via the id parameter to execute arbitrary SQL commands. The vulnerability is due to improper input handling in the PHP script. Exploitation status or in-the-wild details are not provided in the sup...

CVE-2006-7087

CVE-2006-7087 affects Dotdeb PHP prior to 5.2.0 Rev 3. It describes a CRLF injection vulnerability in the mail() function allowing remote attackers to bypass protections and inject arbitrary email headers via CRLF sequences in the query string processed through the PHP_SELF variable. Demonstrated...

CVE-2006-7091

CVE-2006-7091 affects phpht Topsites FREE 1.022b. A PHP remote file inclusion vulnerability exists in config.php that lets a remote attacker supply a URL in the fullpath parameter to execute arbitrary PHP code. The vulnerability’s provenance is uncertain, with details derived from third‑party inf...

CVE-2006-7092

CVE-2006-7092 describes an SQL injection in Mambo LaiThai software (versions 4.5.4 SP2 and earlier) via the usercookie[password] cookie parameter in includes/mambo.php. Remote attackers could execute arbitrary SQL commands. The CVSS metrics indicate a network-accessible high-severity issue with l...

CVE-2006-7090

The CVE-2006-7090 entry concerns phpBB Security (the phpbb_security.php component) in version 1.0.1 and earlier. The vulnerability is a PHP Remote File Inclusion via a tainted php_root_path parameter, enabling remote attackers to execute arbitrary PHP code on affected systems. Documents explicitl...

CVE-2006-7066

CVE-2006-7066 affects Microsoft Internet Explorer 6 on Windows XP SP2. The vulnerability allows remote denial of service (crash) by creating an object inside an iframe, deleting the frame via location.href = about:blank, then accessing a property of the object in the deleted frame, triggering a N...

CVE-2006-7068

CVE-2006-7068 is a PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the cl_headers parameter to menu.php3 or login.php3, indicating a remote file inclusion flaw in those entry p...

CVE-2006-7081

This CVE details remote PHP file inclusion in PhpNews 1.0, exploitable via the Include parameter to Include/lib.inc.php3 and Include/variables.php3. The underlying issue is likely insecure handling of user-controlled Include paths, enabling arbitrary PHP code execution on affected servers. The pr...

CVE-2006-7076

CVE-2006-7076 affects Advanced Guestbook 2.4 for phpBB, with a cross-site scripting flaw in guestbook.php that lets remote attackers inject arbitrary script or HTML via the entry parameter. The issue is identified as XSS and notes indicate it might originate from SQL injection. Documented impact ...