[Full-disclosure] RealVNC 4.1.2 minor heap corruption/DoS vulnerability (authentication required)

This vulnerability affects the latest version of RealVNC 4.1.2 on all platforms. It is tested on Windows. To exploit the vulnerability, the attacker must either control a connected and authenticated client connected to a vulnerable VNC server or control a VNC server with at least one vulnerable...

Directory traversal

Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...

Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Default Administrative Password in Cisco Security Monitoring, Analysis ====================================================================== and Response System CS-MARS =============================...

PHP < 4.1.2 POST File Uploads Vulnerabilities - Active Check

There are several flaws in how PHP handles multipart/form-data POST requests, any one of which can allow an attacker to gain remote access to the system. SPDX-FileCopyrightText: 2002 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sympa < 4.1.2 List Creation Authentication Bypass

Binary data 1733.prm...

Sympa < 4.1.2 wwsympa.fcgi List Master Authentication Bypass

Binary data 2118.prm...