[SECURITY] Fedora Core 5 Update: lha-1.14i-20

LHA is an archiving and compression utility for LHarc format archives. LHA is mostly used in the DOS world, but can be used under Linux to extract DOS files from LHA archives. Install the lha package if you need to extract DOS files from LHA archives...

Unfixed XSS vulnerability at www.angelreisen.com

Security researcher A.D.T, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.angelreisen.com, which at the time of submission ranked 8361707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is...

Unfixed XSS vulnerability at www.rittmeyer.com

Security researcher A.D.T, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.rittmeyer.com, which at the time of submission ranked 1536674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is...

Unfixed XSS vulnerability at www.haberrize.com

Security researcher THE-SH0CK-B0Y, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.haberrize.com, which at the time of submission ranked 1276641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It i...

Solaris 10 (x86) : 121582-20 (deprecated)

commcli 6.4-3.02x86: core patch. Date this patch was last updated by Sun : Apr/20/09 This plugin has been deprecated and either replaced with individual 121582 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 9 (x86) : 121582-20

commcli 6.4-3.02x86: core patch. Date this patch was last updated by Sun : Apr/20/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 121581-20

commcli 6.4-3.02: core patch. Date this patch was last updated by Sun : Apr/20/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

dproxy 0.5 - Remote Buffer Overflow (Metasploit)

dproxy 0.5 - Remote Buffer Overflow Metasploit MetaSploit exploit for remote buffer overflow issue in dproxy Written in 2007 by Alexander Klink c 2007 Cynops GmbH released under the same license as MSF Artistic, GPL dual-licensed $Revision: 1.1 $ package Msf::Exploit::dproxy; use strict; use base...

caid-msgeng.txt

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflo...

CA BrightStor ARCserve (msgeng.exe) Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= CA BrightStor ARCserve msgeng.exe Remote Stack Overflow Exploit ================================================================= !/usr/bin/python This one was listed in the...

CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

Unfixed XSS vulnerability at www.gencbilim.com

Security researcher 0ssi3, has submitted on 20/02/2007 a cross-site-scripting XSS vulnerability affecting www.gencbilim.com, which at the time of submission ranked 15928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/02/2007. It is currentl...

GLSA-200701-20 : Centericq: Remote buffer overflow in LiveJournal handling

The remote host is affected by the vulnerability described in GLSA-200701-20 Centericq: Remote buffer overflow in LiveJournal handling When interfacing with the LiveJournal service, Centericq does not appropriately allocate memory for incoming data, in some cases creating a buffer overflow. Impac...

Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC

Exploit for macOS platform in category dos / poc =================================================================== Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC =================================================================== MOAB-20-01-2007 function boom var str = '';...

Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input

Overview The Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input to its methods. This could allow an attacker to cause the application using the ActiveX control to crash. Description Adobe Acrobat and Adobe Reader provide an ActiveX control to allow applications such as...

CVE-2006-6092

Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the 1 vehicleID, 2 categoryIDlist, 3 saletype, 4 stocknumber, 5 manufacturer, 6 model, 7 vehicleID, 8 year, 9 vin, and 10 listingprice parameters...

CVE-2006-6092

The CVE-2006-6092 entries describe SQL injection vulnerabilities in the 20/20 Auto Gallery vehiclelistings.asp page. Affected component: vehiclelistings.asp in 20/20 Auto Gallery. Root cause: vulnerable parameters (vehicleID, categoryID_list, sale_type, stock_number, manufacturer, model, year, vi...

CVE-2006-6067

Multiple SQL injection vulnerabilities in 20/20 DataShed aka Real Estate Listing System allow remote attackers to execute arbitrary SQL commands via the 1 itemID parameter to a f-email.asp, or the 2 peopleID and 2 sortorder parameters to b listings.asp, different vectors than CVE-2006-5955...

CVE-2006-6067

CVE-2006-6067 describes SQL injection vulnerabilities in 20/20 DataShed (Real Estate Listing System). The affected components are listings.asp (itemID parameter) and f-email.asp (itemID) or listings.asp (peopleID and sort_order). Root cause is SQL command execution via these parameters, with vect...