Security feature bypass

Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors...

CVE-2008-2424

Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors...

CVE-2008-2424

Technical details about CVE-2008-2424 are not publicly available in the provided documents; no specifics on affected versions, impact, or remediation are given. Monitor for updates.

Cross site scripting

Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...

CVE-2008-2167

Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...

CVE-2008-2167

Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...

CVE-2008-2167

ZyXEL ZyWALL 100 is affected by a cross-site scripting (XSS) vulnerability where a crafted Referer header is not properly handled on the 404 error page, allowing remote attackers to inject arbitrary web script or HTML. The available documents identify the affected product and the vulnerability cl...

ZYWALL Referer Header XSS Vulnerability

Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...

A web Trojan samples to obtain a simple process-vulnerability warning-the black bar safety net

The morning our server is hanging Horse, the analysis of the next, by the step to write out! Share, nothing technical content, the master can skip! Yesterday evening found the Trojan to do a simple analysis, the Trojan path is: http://www.. com/ma/web.htm Think of a way to get its source code, it...

Directory traversal

Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme parameter to 1 index.php, 2 editpassword.php, and 3 avatar.php in usercp/; 4 custompage.php; 5...

4 0 4 hung it + bloopers + AD-vulnerability warning-the black bar safety net

Source: six-winged hedgehog so-hedgehog nest http://www.688ip.com/dae5g45 Today in the card rice to see is said to be hung it's something that you want to get the source but returns a 4 0 4; and Careful a look, indeed is hung it from the server there returns the of 4 0 of 4 information inside...

Exero CMS 1.0.1 - theme Multiple Local File Inclusions

Exero CMS 1.0.1 - theme Multiple Local File Inclusions Exero CMS 1.0.1 theme Multiple Local File Inclusion Vulnerabilities Script : http://switch.dl.sourceforge.net/sourceforge/exerocms/ExeroCMS1-0-1.rar Home Page : http://ecms.getox.net/ POC :...

CVE-2008-1283

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

Cross site scripting

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

CVE-2008-1283

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

XSS in Neptune Web Server

//////XSS in Neptune Web Server //404 error page is vulnerable to XSS //http://www.silver-forge.com/ // //////Tested on: //Neptune Web Server 3.0 Professional Edition // ////////Author: //NetJackal //http://netjackal.by.ru //http://hackerz.ir // ////////PoC: //http://victim.net/XSS...

Debian Security Advisory DSA 404-1 (rsync)

The remote host is missing an update to rsync announced via advisory DSA 404-1. OpenVAS Vulnerability Test $Id: deb4041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 404-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Buffer overflow

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...

CVE-2008-0234

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...

Ubuntu 6.10 : linux-restricted-modules-2.6.17 vulnerability (USN-404-1)

Laurent Butti, Jerome Razniewski, and Julien Tinnes discovered that the MadWifi wireless driver did not correctly check packet contents when receiving scan replies. A remote attacker could send a specially crafted packet and execute arbitrary code with root privileges. Note that Tenable Network...