2846 matches found
Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse
Airscanner Mobile Security Advisory 05101001: iTunes 6.0 Shared Music Denial of Service/Spoofing/Flooding/Abuse Demo: The following is a link to a Flash demo in which we demonstrate the vulnerability. link to flash demo http://www.airscanner.com/security/itwns2.html URL:...
CVE-2005-2844
The CVE-2005-2844 issue affects Indiatimes Messenger 6.0: a buffer overflow in MMClient.exe’s RenameGroup function via a long group name argument of the MMClient.MunduMessenger.1 ActiveX object can cause denial of service and may allow arbitrary code execution. Documents confirm the vulnerable co...
MS Windows IIS 5.0 (500-100.asp) Server Name Spoof Exploit
No description provided by source. / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof PoC File:...
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof P...
CVE-2004-2476
The vulnerability CVE-2004-2476 affects Microsoft Internet Explorer 6.0. A remote attacker can induce a denial-of-service by embedding an IFRAME whose source is the character "?"; this leads to an infinite loop and browser crash. The available documents confirm the affected product and the failur...
Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability
Description Microsoft Internet Explorer is prone to a buffer-overflow vulnerability that is exposed when certain COM objects are instantiated as ActiveX controls. A malicious webpage could pass content to these objects to trigger memory corruption. Successful exploits could let remote attackers...
CVE-2002-2087
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsdrop, 2 gdslockmgr, or 3 gdsinetserver...
CVE-2002-2087
The CVE-2002-2087 entry describes a buffer overflow in Borland InterBase 6.0 that allows local users to execute arbitrary code by supplying a long INTERBASE environment variable when invoking gds_drop, gds_lock_mgr, or gds_inet_server. This is documented across multiple feeds (Red Hat, CVE listin...
CVE-2004-2295
CVE-2004-2295 involves a SQL injection in the Reviews module of PHP-Nuke versions 6.0 through 7.3. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the order parameter, enabling potential data disclosure or modification. The provided documents identify t...
CVE-2005-2304
Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service crash via an image with an ICC Profile with a large Tag Count...
CVE-2004-2281
Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by 1 KSPR5YS6GR and 2 KSPR62F4D3...
CVE-2001-1547
Outlook Express 6.0 vulnerability: when the setting to block potentially virus-laden attachments is enabled, forwarded messages may bypass this and allow remote code execution. Affected component is attachments handling in forwarded email. The provided documents state the issue but do not specify...
Infradig60.txt
Summary: Multiple buffer overflows exist in Infradig Systems Inframail Advantage Server Edition 6.0 http://www.infradig.com/ Details: Input to the SMTP MAIL FROM: command and the FTP NLST command is not properly checked and/or filtered. Issuing the character 'A' roughly 40960 times as an argument...
CVE-2002-1803
CVE-2002-1803 describes a cross-site scripting (XSS) flaw in PHP-Nuke 6.0 that allows remote attackers to inject arbitrary script/HTML via Javascript in an IMG tag. Affected software is PHP-Nuke 6.0; the root cause is an XSS vulnerability exposed by image tags, enabling arbitrary code execution i...
CVE-2002-1803
Cross-site scripting XSS vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...
phpStat 1.5 - setup.php Authentication Bypass (Perl)
phpStat 1.5 - setup.php Authentication Bypass Perl !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - PHPStat Setup.PHP Authentication Bypass Vulnerability Exploit By : A l p h a P r o g r a m m e r Sirus-v E-Mail : [email protected] This Xpl Change...
CVE-2004-1829
Affected product: Gijza.net Error Manager 2.1 for PHP-Nuke 6.0. Vulnerability: multiple cross-site scripting (XSS) in error.php, exploitable via the pagetitle, error, or certain error-log parameters. Root cause: insufficient input validation in error handling leading to injection of arbitrary web...
CVE-2004-1830
CVE-2004-1830 : The error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information by supplying invalid (language, newlang, or lang) parameters, which leaks the pathname in a PHP error message. This is a information-disclosure issue affecting the specified...
CVE-2005-1442
Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service client crash and possibly execute arbitrary code via the NOTES.INI file...