5745 matches found
Touch arbitrary file execute vulnerability
Title: Touch arbitrary file execute vulnerability Version: Touch Control 2, 0, 0, 55 Discoverer: PARK, GYU TAE [email protected] Advisory No.: NRVA06-04 Critical: Critical Impact: Gain remote user's privilege Where: From remote Operating System: Windows Only Solution: Patched Notice: 16. 06...
UBBCentral UBB.Threads 6.4.x 6.5.2 - thispath Remote File Inclusion
UBBCentral UBB.Threads 6.4.x 6.5.2 - thispath Remote File Inclusion Anomaly 1n The System presents UBB.threads = 6.4.x Remote File Inclusion founded by V4mu in 04/20/2006 URL: http://www.ubbcentral.com Google dork: allinurl:"/ubbthreads/" exploit:...
r57shell.php <= 1.3 XSS
==================== Discovered by: Qex Date: 20 April 2006 ==================== Run command: XSS...
eudora_imap.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
linux/x86 reboot - 20 bytes
linux/x86 reboot - 20 bytes. Shellcode exploit for linx86 platform / linux/x86 rebootLINUXREBOOTMAGIC1, LINUXREBOOTMAGIC2, LINUXREBOOTCMDRESTART - 20 bytes - izik / char shellcode = "\x6a\x58" // push $0x58 "\x58" // pop %eax "\xbb\xad\xde\xe1\xfe" // mov $0xfee1dead,%ebx "\xb9\x69\x19\x12\x28" /...
Solaris 10 (sparc) : 121308-20 (deprecated)
SunOS 5.10: Solaris Management Console Pat. Date this patch was last updated by Sun : Apr/02/10 This plugin has been deprecated and either replaced with individual 121308 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...
GLSA-200511-20 : Horde Application Framework: XSS vulnerability
The remote host is affected by the vulnerability described in GLSA-200511-20 Horde Application Framework: XSS vulnerability The Horde Team reported a potential XSS vulnerability. Horde fails to properly escape error messages which may lead to displaying unsanitized error messages via...
Solaris 10 (x86) : 118844-20 (deprecated)
SunOS 5.10x86: kernel Patch. Date this patch was last updated by Sun : Oct/28/05 This plugin has been deprecated and either replaced with individual 118844 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
CVE-2005-2213
Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...
CVE-2005-2213
Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...
Solaris 9 (x86) : 117470-09
SunOS 5.9x86: tcp Patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 7 (x86) : 107116-20
SunOS 5.7x86: lp Patch. Date this patch was last updated by Sun : Mar/22/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 8 (x86) : 109897-20
SunOS 5.8x86: USB and Audio Framework patch. Date this patch was last updated by Sun : Aug/24/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
BenHur Firewall Source Port 20 ACL Restriction Bypass
It is possible to connect to firewall-protected ports on the remote host by setting the source port to 20. An attacker may use this flaw to access services that should not be accessible to outsiders on this host. C Tenable Network Security, Inc. Script audit and contributions from Carmichael...
CVE-2000-0270
The CVE affects Emacs 20’s make-temp-name Lisp function, which creates temporary files with predictable names, enabling a symlink attack. This is described by CVE-2000-0270 in NVD; connected sources note the same vulnerability. The available documents do not specify a patch version or workaround....
CVE-2000-0269
CVE-2000-0269 : Emacs 20 does not properly set permissions for a slave PTY when starting a new subprocess, allowing local users to read or modify communications between Emacs and the subprocess. Root cause: incorrect PTY permissions handling. Impact: partial confidentiality (read/modify communica...
CVE-2000-0271
In CVE-2000-0271, Emacs 20’s read-passwd and related Lisp functions do not properly clear the history of recently typed keys. This can allow an attacker to read unencrypted passwords stored in the command history. The issue is rooted in the Lisp password/history handling within Emacs 20. The prov...
CVE-2000-0271
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords...