Unfixed XSS vulnerability at www.adstech.com

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.adstech.com, which at the time of submission ranked 103401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/03/2007. It is currentl...

Borland InterBase 2007 PWD_db_aliased Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Unfixed XSS vulnerability at www.barbour.info

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.barbour.info, which at the time of submission ranked 1024391 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is...

Borland InterBase open_marker_file() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted attach request. Module Options msf use exploit/linux/misc/ib/openmarkerfile msf undefinedopenmarkerfile show actions ...actions... msf undefinedopenmarkerfile set ACTION msf undefinedopenmarkerfile sh...

Unfixed XSS vulnerability at www.scisys.co.uk

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.scisys.co.uk, which at the time of submission ranked 2164883 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is...

Unfixed XSS vulnerability at microformguides.gale.com

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting microformguides.gale.com, which at the time of submission ranked 52482 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is...

Borland Interbase 2007 2007SP2 INET_connect Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Debian DSA-1381-2 : linux-2.6 - several vulnerabilities

Several local vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-5755 The NT bit maybe leaked into the next task which can...

CentOS 3 / 4 / 5 : gimp (CESA-2007:0513)

Updated gimp packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an image composition and editing program. Multiple...

Moderate: elinks security update

0.9.2-3.3.5.2 - fix elinks-0.9.2-httpspostdata.patch 303881 0.9.2-3.3.5.1 - fix 297611 - CVE-2007-5034 elinks reveals POST data to HTTPS proxy 0.9.2-3.3 - fix 215731 - elinks smb protocol arbitrary file access...

Borland InterBase isc_attach_database() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted attach request. Module Options msf use exploit/windows/misc/ib/iscattachdatabase msf undefinediscattachdatabase show actions ...actions... msf undefinediscattachdatabase set ACTION msf...

Borland InterBase isc_create_database() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted create request. Module Options msf use exploit/windows/misc/ib/isccreatedatabase msf undefinedisccreatedatabase show actions ...actions... msf undefinedisccreatedatabase set ACTION msf...

Borland InterBase INET_connect() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted service attach request. Module Options msf use exploit/linux/misc/ib/inetconnect msf undefinedinetconnect show actions ...actions... msf undefinedinetconnect set ACTION msf undefinedinetconnect show...

Borland InterBase jrd8_create_database() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted create request. Module Options msf use exploit/linux/misc/ib/jrd8createdatabase msf undefinedjrd8createdatabase show actions ...actions... msf undefinedjrd8createdatabase set ACTION msf...

Borland InterBase SVC_attach() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted service attach request. Module Options msf use exploit/windows/misc/ib/svcattach msf undefinedsvcattach show actions ...actions... msf undefinedsvcattach set ACTION msf undefinedsvcattach show options...

CentOS 3 : php (CESA-2007:0889)

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server...

HP-UX PHNE_36168 : HP-UX Running rpc.yppasswdd, Remote Denial of Service (DoS) (HPSBUX02295 SSRT071333 rev.1)

s700800 11.11 ONC/NFS General Release/Performance Patch : A potential security vulnerability has been identified with HP-UX running rpc.yppasswdd. The vulnerability could be exploited remotely to create a denial of service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CentOS 4 : kernel (CESA-2007:0937)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

Debian DSA-1380-1 : elinks - programming error

Kalle Olavi Niemitalo discovered that elinks, an advanced text-mode WWW browser, sent HTTP POST data in cleartext when using an HTTPS proxy server potentially allowing private information to be disclosed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

FreeBSD : bugzilla -- 'createmailregexp' security bypass vulnerability (f8d3689e-6770-11dc-8be8-02e0185f8d72)

The Bugzilla development team reports : Bugzilla::WebService::User::offeraccountbyemail does not check the 'createemailregexp' parameter, and thus allows users to create accounts who would normally be denied account creation. The 'emailregexp' parameter is still checked. If you do not have the...