Default credentials

The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...

CVE-2006-0363

The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...

Immunity Canvas: WORLDMAIL

Name| worldmail ---|--- CVE| CVE-2005-4267 Exploit Pack| CANVAS Description| WorldMail Notes| CVE Name: CVE-2005-4267 VENDOR: Qualcomm CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4267 CVSS: 7.5...

Immunity Canvas: WEBMIN

Name| webmin ---|--- CVE| CVE-2005-3912 Exploit Pack| CANVAS Description| Webmin Remote Exploit Notes| CVE Name: CVE-2005-3912 VENDOR: Webmin.com OSVDB: Repeatability: References: http://www.dyadsecurity.com/webmin-0001.html - http://www.dyadsecurity.com/perl-0002.html CVE Url:...

Artmedic Kleinanzeigen File Inclusion Vulnerability

Artmedic Kleinanzeigen, an email verifying PHP script, has been found to contain an external file inclusion vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

dwhttpd format string

The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Jet Admin 6.5 or less Vulnerability

The remote HP Web Jetadmin is vulnerable to multiple exploits. This includes, but is not limited to, full remote administrative access. An attacker can execute code remotely with SYSTEM level or root privileges by invoking the ExecuteFile function. To further exacerbate this issue, there is worki...

CVSTrac filediff vulnerability

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version of filediff has a flaw in the input sanitation which, when exploited, can lead to a remote attacker executing arbitrary commands on the system. OpenVAS has determined the vulnerability...

Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

An information disclosure and denial of service vulnerability exists when the RPC Runtime Library processes specially crafted messages. An attacker who successfully exploited this vulnerability could potentially read portions of active memory or cause the affected system to stop responding. OpenV...

Flash FTP Server Directory Traversal Vulnerability

Flash FTP Server easy-to-set-up FTP server for all Windows platforms. Some bugs were found that will allow a malicious user to write and read anywhere on the disk. OpenVAS Vulnerability Test $Id: flashftpserverdirectorytraversal.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Flash FTP Serve...

Immunity Canvas: STINKY

Name| stinky ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Notes| CVE Name: CVE-2005-3252 VENDOR: SourceFire Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date public...

Immunity Canvas: MS05_046

Name| ms05046 ---|--- CVE| CVE-2005-1985 Exploit Pack| CANVAS Description| Microsoft Netware Service RPC Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-046.mspx CVE Name: CVE-2005-1985 VENDOR: Microsoft MSADV: MS05-046 Repeatability: One shot Note: Date public...

Immunity Canvas: MS05_040

Name| ms05040 ---|--- CVE| CVE-2005-0058 Exploit Pack| CANVAS Description| Windows Telephony Service Overflow Notes| CVE Name: CVE-2005-0058 VENDOR: Microsoft MSADV: MS05-040 MSRC: http://www.microsoft.com/technet/security/Bulletin/MS05-040.mspx Platforms Tested: Windows XP Home/Pro SP1a up2date,...

Immunity Canvas: PHPBB_HIGHLIGHT

Name| phpbbhighlight ---|--- CVE| CVE-2005-2086 Exploit Pack| CANVAS Description| phpBB Highlight Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: phpbb.com CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2086 CVE Name: CVE-2005-2086...

CVE-2002-1851

Technical details (affected components, exact exploit vectors, and remediation) are not publicly provided in the connected documents. Monitor updates from Red Hat, CVE listings, and vendor advisories for confirmed information.

CVE-2002-1851

Buffer overflow in WSFTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors...

Immunity Canvas: MEWEBMAIL

Name| MEWebMail ---|--- CVE| CVE-2005-1348 Exploit Pack| CANVAS Description| MailEnable WebMail Authorization Buffer Overflow Notes| References: Found by CorryL of www.x0n3-h4ck.org CVE Name: CVE-2005-1348 VENDOR: MailEnable Repeatability: This is a repeatable exploit given that the node is...

CVE-2005-0433

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to 1 db.php, 2 mainfile.php, 3 Downloads/index.php, or 4 WebLinks/index.php, which lists the path in a PHP error message...

CVE-2005-0433

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to 1 db.php, 2 mainfile.php, 3 Downloads/index.php, or 4 WebLinks/index.php, which lists the path in a PHP error message...

CVE-2005-0434

Multiple cross-site scripting XSS vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via 1 the newdownloadshowdays parameter in a NewDownloads operation or 2 the newlinkshowdays parameter in a NewLinks operation...