Apache < 1.3.37 mod_rewrite LDAP Protocol URL Handling Overflow

The remote host appears to be running a version of Apache which is older than 1.3.37. This version contains an off-by-one buffer overflow in the modrewrite module. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid31654; scriptversion"1.26"; scriptcvsdate"Date: 2018/11/1...

Design/Logic Flaw

The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account. NOTE:...

eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

exv2myannonces-sql.txt

Powered by eXV2 MyAnnonces 1.8 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : eXV2 MyAnnonces EXPLOIT :...

eXV2 Module MyAnnonces - 'lid' SQL Injection

Powered by eXV2 MyAnnonces 1.8 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : eXV2 MyAnnonces EXPLOIT :...

Microsoft Office Web组件ActiveX控件远程代码执行漏洞（MS08-017）

BUGTRAQ ID: 28135,28136 CVECAN ID: CVE-2006-4695,CVE-2007-1201 Microsoft Office Web组件是COM控件集合，用于向Web发布电子表格、图表和数据库，并查看所发布的组件。 Microsoft Office Web组件在解析特制的URL时管理内存资源的方式存在漏洞，如果用户受骗访问了恶意网页的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Office Web Components 2000 临时解决方法： 禁止在Internet Explorer中运行Office Web组件库，为CLSID...

Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow

Added: 03/12/2008 CVE: CVE-2006-4695 BID: 28135 OSVDB: 42711 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A buffer overflow vulnerability in the OWC.Spreadsheet.9 ActiveX control allows command execution when a user loads a web...

Debian Security Advisory DSA 1503-2 (kernel-source-2.4.27 (2.4.27-10sarge7))

The remote host is missing an update to kernel-source-2.4.27 2.4.27-10sarge7 announced via advisory DSA 1503-2. OpenVAS Vulnerability Test $Id: deb15032.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1503-2 kernel-source-2.4.27 2.4.27-10sarge7 Authors:...

Debian: Security Advisory (DSA-1503-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1503-2 [email protected] http://www.debian.org/security/ dann frazier March 6, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

openSUSE 10 Security Update : perl-Tk (perl-Tk-5035)

Specially crafted GIF files could crash perl-Tk CVE-2006-4484. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-Tk-5035. The text description of this plugin is C SUSE LLC...

SuSE 10 Security Update : perl-Tk (ZYPP Patch Number 5034)

Specially crafted GIF files could crash perl-Tk. CVE-2006-4484 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31339; scriptversion"1.16";...

Buffer overflow

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

openSUSE 10 Security Update : apache2-mod_jk (apache2-mod_jk-4992)

Fixed various issues in tomcat : - CVE-2006-7196: Cross-site scripting XSS vulnerability in example JSP applications - CVE-2007-3382: Handling of cookies containing a ' character - CVE-2007-3385: Handling of ' in cookies - CVE-2007-5641: tomcat path traversal / information leak - CVE-2007-1860:...

CentOS 4 / 5 : gd (CESA-2008:0146)

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

gd security update

CentOS Errata and Security Advisory CESA-2008:0146 Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics...

netpbm: GIF handling buffer overflow in giftopnm

Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

Moderate: Red Hat Security Advisory: gd security update

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

Debian: Security Advisory (DSA-1504-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 4 / 5 : gd (RHSA-2008:0146)

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...