CVE-2009-3525

The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the...

CVE-2009-3534

Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2009-3534

CVE-2009-3534 describes a directory traversal/local file include vulnerability in LionWiki 3.0.3. The issue arises in the index.php or lang parameter handling, where a .. path traversal is possible when magic_quotes_gpc is disabled, allowing remote attackers to read arbitrary files. Connected sou...

CVE-2009-3534

Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

Cerberus FTP Server超长命令远程拒绝服务漏洞

Bugraq ID: 36390 Cerberus FTP Server是一款FTP服务程序。 Cerberus FTP Server不正确处理超长命令，远程攻击者可以利用漏洞使应用程序停止响应，造成拒绝服务攻击。 Cerberus FTP Server 3.0.3 目前没有解决方案提供： http://www.cerberusftp.com/index.html / vulnerab : Remote Denial of Service Command vulnerab : User Software : Cerberus FTP Server Versian : 3.0.3...

Cerberus FTP Server 3.0.3 - Remote Denial of Service

Cerberus FTP Server 3.0.3 - Remote Denial of Service / vulnerab : Remote Denial of Service Command vulnerab : User Software : Cerberus FTP Server Versian : 3.0.3 website software : http://www.cerberusftp.com greetz : Str0ke Milw0rm is The best in world / include include include include include...

Cerberus FTP Server 3.0.3 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== Cerberus FTP Server 3.0.3 Remote Denial of Service Exploit ========================================================== / vulnerab : Remote Denial of Service Command vulnerab : User Softwar...

Mozilla Firefox MFSA存在多个安全漏洞

Bugraq ID: 35758 CVE ID：CVE-2009-1194 CVE-2009-2462 CVE-2009-2463 CVE-2009-2464 CVE-2009-2465 CVE-2009-2466 CVE-2009-2467 CVE-2009-2468 CVE-2009-2469 CVE-2009-2471 CVE-2009-2472 CNCVE ID：CNCVE-20091194 CNCVE-20092462 CNCVE-20092463 CNCVE-20092464 CNCVE-20092465 CNCVE-20092466 CNCVE-20092467...

GLSA-200904-13 : Ventrilo: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200904-13 Ventrilo: Denial of Service Luigi Auriemma reported a NULL pointer dereference in Ventrilo when processing packets with an invalid version number followed by another packet. Impact : A remote attacker could send speciall...

Woltlab Burning Board Multiple Input Validation Vulnerabilities

Woltlab Burning Board is prone to multiple input-validation vulnerabilities, including: - Multiple security that may allow attackers to delete private messages - A cross-site scripting vulnerability - Multiple URI redirection vulnerabilities Attackers can exploit these issues to delete private...

Cross site scripting

Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...

CVE-2008-5869

The CVE-2008-5869 entry concerns the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3, affected by a cross-site scripting (XSS) vulnerability exploitable by remote authenticated users via the system.sysName.0 SNMP OID. The issue allows injection of arbitrary web script or HTML. Public refer...

CVE-2008-5869

Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...

Design/Logic Flaw

The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for remote attackers to obtain sensitive information or modify SNMP variables...

CVE-2008-5866

The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for remote attackers to obtain sensitive information or modify SNMP variables...

CVE-2008-5070

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

Design/Logic Flaw

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...

CVE-2008-4405

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...

CVE-2008-4405

CVE-2008-4405 affects Xen 3.0.3 (xend) where the /local/domain xenstore tree is not properly restricted, allowing a guest DomU to write to (console/tty, console/limit, image/device-model-pid) and potentially cause a denial of service with unspecified other impact. Multiple advisories (RHSA-2009:0...

CVE-2008-4405

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...