Unfixed XSS vulnerability at www.izfas.com.tr

Security researcher MaXWeL, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.izfas.com.tr, which at the time of submission ranked 606674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is current...

CVE-2007-5797

SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database...

CVE-2007-5798

IBM WebSphere Application Server 6.1.x before Fix Pack 13 (6.1.0.13) is affected by multiple XSS vulnerabilities in uddigui/navigateTree.do of the UDDI user console. The issue allows remote attackers to inject arbitrary web script or HTML via the keyField, nameField, valueField, and frameReturn p...

CVE-2007-5797

Apache Geronimo 2.0–2.1 is affected by CVE-2007-5797 due to a SQLLoginModule/LoginModule path that does not throw an exception for a nonexistent username. This results in remote authentication bypass, permitting a login attempt with any username not in the database to succeed. The concrete descri...

Unfixed XSS vulnerability at www.trustnet.co.uk

Security researcher MaXWeL, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.trustnet.co.uk, which at the time of submission ranked 74686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is...

CVE-2007-5767

CVE-2007-5767 concerns a heap-based buffer overflow in Novell BorderManager 3.8’s Client Trust (clntrust.exe) that listens on UDP 3024. During a validation request, copying of the Novell tree name does not stop at a wide-character backslash or NULL, allowing overflow of a static buffer via wsprin...

CVE-2007-5795

The CVE-2007-5795 issue affects Emacs 22 prior to 22.2 where the hack-local-variables handling, when enable-local-variables is set to :safe, fails to properly search unsafe variable lists. This can allow a user-assisted attacker to modify critical program variables via a Local variables declarati...

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

CVE-2007-5197

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods...

CVE-2007-4829

The CVE-2007-4829 entry concerns a directory-traversal flaw in the Archive::Tar Perl module (versions

CVE-2007-5660

CVE-2007-5660 affects Macrovision InstallShield Update Service ActiveX (Isusweb.dll). The connected sources describe a stack/remote buffer overflow in Isusweb.dll (Isusweb.dll 6.0.100.54472) exploited by passing an overly long ProductCode string to the DownloadAndExecute method, enabling arbitrar...

CVE-2007-5197

This CVE (CVE-2007-5197) affects Mono up to version 1.2.5.1, where a buffer overflow in Mono.Math.BigInteger (Reduce in Montgomery-based Pow methods) can allow context-dependent attackers to execute arbitrary code. The OpenVAS/Mandriva, Fedora, Ubuntu advisories indicate patches were released for...

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability

ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-058.html October 16, 2007 -- CVE ID: CVE-2007-5766 -- Affected Vendor: Oracle -- Affected Products: E-Business Suite 11 E-Business Suite 12 -- TippingPointTM IPS Customer Protection:...

Unfixed XSS vulnerability at www.afdream.com

Security researcher 0ssi3, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.afdream.com, which at the time of submission ranked 205968 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is currently...

Ubuntu 6.06 - DHCPd Remote Denial of Service

Ubuntu 6.06 DHCPd bug Remote Denial of Service Exploit Author: RoMaNSoFt Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4601.tgz 1022007-DoS-CVE-2007-5365.tgz milw0rm.com 2007-11-02...

Lotus Domino IMAP mailbox name buffer overflow

Added: 11/02/2007 CVE: CVE-2007-3510 BID: 26176 OSVDB: 40953 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in Lotus Domino could allow a remote, authenticated attacker to execute arbitrary commands by sending ...

iDefense Security Advisory 10.31.07: Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability

Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability iDefense Security Advisory 10.31.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 31, 2007 I. BACKGROUND Symantec Altiris Deployment Solution is an automated OS deployment solution that is used...

Ubuntu 6.06 - DHCPd Remote Denial of Service

Ubuntu 6.06 - DHCPd Remote Denial of Service Ubuntu 6.06 DHCPd bug Remote Denial of Service Exploit Author: RoMaNSoFt Exploit-DB Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4601.tgz 1022007-DoS-CVE-2007-5365.tgz milw0rm.com 2007-11-02...

Unfixed XSS vulnerability at www.pakistans.com

Security researcher GURUS, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.pakistans.com, which at the time of submission ranked 741280 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2007. It is current...