Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== Eserv 3.x FTP Server ABOR Remote Stack Overflow PoC ===================================================== !/usr/bin/perl Eserv/3.x FTP Server ABOR Remote Stack Overflow PoC Summary: Eserv/3.x ...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Summary Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server - Built-in scheduler and dialer. Description Stack-based buffer overflow in the FTP server in Etype Eser...

Memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engine and 1 a zero value of the "this" variable in the...

CVE-2008-4064

CVE-2008-4064 affects Mozilla Firefox 3.x prior to 3.0.2. The description identifies three concrete vectors contributing to memory safety issues: (1) a memory corruption/possible code execution path via graphics rendering related to a long alert messagebox in cairo_surface_set_device_offset, (2) ...

Directory traversal

Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. dot dot in the neturl parameter...

Gentoo Security Advisory GLSA 200409-16 (Samba)

The remote host is missing updates announced in advisory GLSA 200409-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4151

Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. dot dot in the neturl parameter...

CVE-2008-4151

CVE-2008-4151 : Directory traversal in collect.php of CYASK 3.x allows remote attackers to read arbitrary files via a .. in the neturl parameter. Impact: read access to files. The provided documents do not include remediation details or patch/version information. Exploitation status is not specif...

CYASK 3.x (collect.php neturl) Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== CYASK 3.x collect.php neturl Local File Disclosure Vulnerability ================================================================== This vulnerability leads to that the...

CYASK 3.x - neturl Local File Disclosure

CYASK 3.x - neturl Local File Disclosure This vulnerability leads to that the attacker can read any file on your webserver when it installs cyask. The $neturl variable in collect.php is short of enough check. When the attacker registers a new user, he can pass the user check and then submit any...

CYASK 3.x (collect.php neturl) Local File Disclosure Vulnerability

No description provided by source. This vulnerability leads to that the attacker can read any file on your webserver when it installs cyask. The $neturl variable in collect.php is short of enough check. When the attacker registers a new user, he can pass the user check and then submit any filenam...

microtik-poc.txt

/ -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' SNMP Service General Information Summary ... RouterOS supports only Get, which means that you can use this implementation only for network monitoring. The MikroTik Router...

CVE-2008-3367

CVE-2008-3367 describes a cross-site scripting (XSS) vulnerability in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03, where attacker-supplied input in the email parameter to RTE_popup_link.asp can inject arbitrary script or HTML. Affected software is the Web Wiz RTE web component; root ca...

CVE-2008-3198

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

Exploit for unknown platform in category web applications ============================================================= Joomla Simple Shop Galore Component 3.x catid SQL Injection =============================================================...

CVE-2008-2133

Cross-site scripting XSS vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, as demonstrated by a CSS property in the STYLE attribute of a DIV element, a different vulnerability than...

CVE-2008-2133

CVE-2008-2133 is an XSS vulnerability in the Journal module of Tru-Zone Nuke ET 3.x. The flaw allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, demonstrated by a CSS property in the STYLE attribute of a DIV element. Affected component: Journal ...

CVE-2008-2134

CVE-2008-2134 affects the Journal module in Tru-Zone Nuke ET 3.x. An attacker can remotely obtain access to arbitrary user accounts and modify or delete data by supplying a modified username in an unspecified cookie. The vulnerability is documented in multiple sources (NVD entry CVE-2008-2134). T...

Cross site scripting

Cross-site scripting XSS vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1960

Cross-site scripting XSS vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...