1366 matches found
Konqueror 4.1 XSS / Remote Crash Vulnerabilities
No description provided by source. +-----------------------------------------------------+ | Konqueror 4.1 XSS / Remote Crash Vulnerabilities | +-----------------------------------------------------+ | by athos - stakerathotmaildotit | | http://konqueror.kde.org |...
PT-2008-4441 · Microsoft · Windows Media Player +2
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player version 6.4 Windows Media Format Runtime versions 7.1 through 11 Windows Media Services versions 4.1, 9, and 2008 Description: The issue arises from improper use of the Service Principal Name SPN identifier when...
CVE-2008-4988
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...
Design/Logic Flaw
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...
CVE-2008-4988
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...
CVE-2008-4988
Removed by vendor...
CVE-2008-4988
CVE-2008-4988 affects pscal in xcal 4.1. It allows local users to overwrite arbitrary files through a symlink race against a temporary file in /tmp/pscal#####, enabling an arbitrary file overwrite vulnerability. Root cause is a symlink attack on the temporary file; impact is local confidentiality...
Absolute Poll Manager XE 4.1 - Insecure Cookie Handling
Absolute Poll Manager XE 4.1 - Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v...
Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability
Exploit for asp platform in category web applications ========================================================== Absolute Poll Manager XE 4.1 Cookie Handling Vulnerability ========================================================== | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | ...
Python 'Imageop'模块参数验证缓冲区溢出漏洞
BUGTRAQ ID: 31932 CNCAN ID：CNCAN-2008102806 Python是一款开放源代码的脚本编程语言。 Python 'Imageop'模块的不正确参数验证，远程攻击者可以利用漏洞进行缓冲区溢出而触发segfault错误。 目前没有详细漏洞细节提供，可能导致任意代码执行。 Python Software Foundation Python 2.5.2 Python Software Foundation Python 2.5.1 Python Software Foundation Python 2.4.5 Python Software Foundatio...
CVE-2008-4569
The CVE-2008-4569 entry concerns XIGLA Software Absolute Poll Manager XE 4.1. Affected component: xlacomments.asp (parameter: p). Underlying issue: SQL injection that could allow remote execution of arbitrary SQL commands. Documented impact indicates partial confidentiality, integrity, and availa...
Gentoo Security Advisory GLSA 200606-07 (vixie-cron)
The remote host is missing updates announced in advisory GLSA 200606-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
turba-xss.txt
+======================================================================================================+ + Horde & Turba Contact Manager & XSS Vulnerabilities and Remote Java's File Inclusion + +======================================================================================================...
PT-2008-4375 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.37 Apache Tomcat versions 5.5.0 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16 Description: The issue allows remote attackers to read arbitrary files via encoded directory traversal sequenc...
Discuz! 6.0.1 - searchid SQL Injection
Discuz! 6.0.1 - searchid SQL Injection =5 & mysql=4.1 BY james +------------------------------------------------------------------+ "; if$argc4 $host=$argv1; $port=$argv2; $path=$argv3; $uid=$argv4; else echo "Usage: php ".$argv0." host port path uid\n"; echo "host: target server \n"; echo "port:...
PT-2008-2825 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.37 Apache Tomcat versions 5.5.0 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16 Description: The issue allows remote attackers to inject arbitrary web script or HTML via a crafted string tha...
CGIWrap Charset Specification Weakness Error Message XSS
The remote host is running CGIWrap, a wrapper for CGI scripts to provide enhanced security. The version of CGIWrap installed on the remote host does not specify a charset when responses are for error pages. An attacker may be able to leverage this issue to inject arbitrary HTML and script code in...
Zeroboard preg_replace() vulnerability Remote nobody exploit
No description provided by source. / ---------------------------------------------------------------------------------- + Zeroboard pregreplace vulnerability Remote nobody shell exploit ---------------------------------------------------------------------------------- by n0gada [email protected]...
