1324 matches found
SQL Injection in system extension indexed_search
It has been discovered that the system extension indexedsearch is vulnerable to a SQL Injection flaw. Component Type: System extension, part of the TYPO3 default installation. Affected Versions: TYPO3 versions 3.x, 4.0 to 4.0.7, 4.1 to 4.1.3. Vulnerability Type: SQL Injection. Severity: Low...
CVE-2007-6207
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...
CVE-2007-6207
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...
Cross site scripting
Cross-site scripting XSS vulnerability in enterbug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and 3.x before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the buildid field in the "guided form."...
Apple iOS 3.x < 3.0.1 Buffer Overflow
Binary data 5110.prm...
Mandrake Linux Security Advisory : tetex (MDKSA-2007:109)
Buffer overflow in the gdImageStringFTEx function in gdft.c in the GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font. Tetex 3.x uses an embedded copy of the...
Code injection
WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service infinite loop and daemon hang via a messenger URL that invokes edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or...
CVE-2007-2506
WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service infinite loop and daemon hang via a messenger URL that invokes edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or...
Second Sight Software ActiveGS ActiveX control stack buffer overflows
Overview The Second Sight Software ActiveGS ActiveX control contains several stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Second Sight Software ActiveGS is an Apple IIGS emulator that is provided as an...
revenge_proftpd_ctrls_24.pl.txt
!/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory : http://www.coresecurity.com/?action=item&id=1594 Exploitation condition -...
CVE-2007-0965
Cisco FWSM 3.x before 3.13.2, when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service device reboot via a long HTTP request...
[SA23669] Movable Type "nofollow" Plugin Comment Script Insertion
TITLE: Movable Type "nofollow" Plugin Comment Script Insertion SECUNIA ADVISORY ID: SA23669 VERIFY ADVISORY: http://secunia.com/advisories/23669/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Movable Type 3.x http://secunia.com/product/5753/ DESCRIPTION: A...
OpenBSD 3.x - 4.0 vga_ioctl() Local Root Exploit
No description provided by source. / Critical Security OpenBSD 3.x-4.0 vgaioctl root exploit Bug had been discovered by allmighty Ilja van Sprundel ilja.netric.org Some code had been stolen from noir's openbsd exploit sources Fix is available:...
[SA22842] Ampache Unauthorized Guest Access
TITLE: Ampache Unauthorized Guest Access SECUNIA ADVISORY ID: SA22842 VERIFY ADVISORY: http://secunia.com/advisories/22842/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Ampache 3.x http://secunia.com/product/5347/ DESCRIPTION: A vulnerability has been reporte...
CVE-2006-4049: Undefined Security Weakness
Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack vectors...
RARLAB WinRAR 3.x - LHA Filename Handling Buffer Overflow
// source: https://www.securityfocus.com/bid/19043/info WinRAR is susceptible to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This vulnerability allows attackers to execute arbitrar...
[SA19581] ExtractNow unacev2.dll Buffer Overflow Vulnerability
TITLE: ExtractNow unacev2.dll Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19581 VERIFY ADVISORY: http://secunia.com/advisories/19581/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: ExtractNow 3.x http://secunia.com/product/9263/ DESCRIPTION: Secunia...
XSS в vBulletin 3.x
Здравствуйте, vuln. Параметры posthash и poststarttime в скриптах newreply.php и newthread.php не фильтруются в POST-запросе это для версии 3.0.9 для 3.5.4 уязвим только параметр posthash и только в скрипте newthread.php В результате чего возможна атака типа XSS. ПРИМЕР: POST /forum/newthread.php...
[SA19483] Groupmax World Wide Web Cross-Site Scripting Vulnerability
TITLE: Groupmax World Wide Web Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19483 VERIFY ADVISORY: http://secunia.com/advisories/19483/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Groupmax World Wide Web for Scheduler 3.x...
CVE-2006-0922
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php aka upload.php that allows remote attackers to upload arbitrary files vi...