3857 matches found
Unfixed XSS vulnerability at www.mialombardia.com.ar
Security researcher Langy, has submitted on 29/08/2007 a cross-site-scripting XSS vulnerability affecting www.mialombardia.com.ar, which at the time of submission ranked 8984494 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is...
Apple iChat fails to properly handle crafted TXT key hashes
Overview A vulnerability in the way Apple iChat handles specially crafted TXT key hashes could lead to denial of service. Description Apple iChat is an instant message client for Apple Mac OS X. Apple iChat Agent is a back-end process that manages iChat sessions and available contacts. Apple...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...
Apple iChat Bonjour 3.1.6.441 Multiple Denial of Service Exploit
Exploit for macOS platform in category dos / poc ================================================================ Apple iChat Bonjour 3.1.6.441 Multiple Denial of Service Exploit ================================================================ !/usr/bin/ruby c 2006 Lance M. Havok All Rights...
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities !/usr/bin/ruby c 2006 Lance M. Havok All Rights Reserved. basic proof of concept for MOAB-29-01-2007 require 'digest/sha1' require 'rubygems' require 'net/dns/mdns-sd' bugselected = ARGV0 || "0".toi TMPARR = DNSSD =...
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
!/usr/bin/ruby c 2006 Lance M. Havok All Rights Reserved. basic proof of concept for MOAB-29-01-2007 require 'digest/sha1' require 'rubygems' require 'net/dns/mdns-sd' bugselected = ARGV0 || "0".toi TMPARR = DNSSD = Net::DNS::MDNSSD trap"INT" puts "++ Exiting..." begin TMPARR.each do |o| o.stop e...
Solaris 9 (sparc) : 119465-17
Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 9 (x86) : 119435-29
SunOS 5.9x86: ip patch. Date this patch was last updated by Sun : Mar/05/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2006-3728
Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 118844-29 on x86 and without patch 118833-11 118855-08 allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can trigger a system panic,...
Fog Creek Software FogBugz 4.0 29 - 'default.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16216/info FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...
Panda Remote Heap Overflow
Date November 29, 2005 Vulnerability The Panda Antivirus Library provides file format support for virus analysis. During decompression of ZOO files Panda is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remote...
88Script's Event Calendar v2.0 SQL inj. vuln.
88Script's Event Calendar v2.0 SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/88scripts-event-calendar-v20-sql-inj.html Vendor:http://www.88scripts.com/ affected version: v2.0 and prior Product Description: A simple yet elegant even...
[EXPL] ZeroBoard Remote Command Execution (Exploit, preg_replace)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
GLSA-200504-29 : Pound: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200504-29 Pound: Buffer overflow vulnerability Steven Van Acker has discovered a buffer overflow vulnerability in the 'addport' function in Pound. Impact : A remote attacker could send a request for an overly long hostname...
bsd/x86 execve /bin/sh setuid (0) 29 bytes
Exploit for bsd/x86 platform in category shellcode ========================================== bsd/x86 execve /bin/sh setuid 0 29 bytes ========================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0...
bsd/x86 execve /bin/sh setuid (0) 29 bytes
No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0" // xor %eax,%eax "\x50" // push %eax "\xb0\x17" // mov $0x17,%al "\x50" // push %eax "\xcd\x80" // int $0x80 "\x50" // push %eax...
