5016 matches found
libxml XML实体名堆缓冲区溢出漏洞
BUGTRAQ ID: 31126 CVE ID：CVE-2008-3529 CNCVE ID：CNCVE-20083529 libxml软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml处理畸形XML内容时存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当libxml2处理超长XML实体名时存在基于堆的缓冲区溢出，如果应用程序链接libxml2处理不可信的畸形XML内容，可导致应用程序崩溃或任意代码执行。 XMLSoft Libxml2 2.6.31 XMLSoft Libxml2 2.6.30 XMLSoft Libxm...
contentnow-uploadxss.txt
=============================================================== ContentNow CMS Upload/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
CVE-2008-2786
Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes...
CVE-2008-2269
AustinSmoke GasTracker AS-GasTracker 1.0.0 allows remote attackers to bypass authentication and gain privileges by setting the gastrackeradmin cookie to TRUE...
CVE-2008-2269
CVE-2008-2269 affects AustinSmoke GasTracker (AS-GasTracker) 1.0.0. The root issue is an authentication bypass: remote attackers can set the gastracker_admin cookie to TRUE to gain privileges. Impact is described as credential bypass leading to elevated access. Connected sources (NVD, CVE registr...
asgastracker-cookie.txt
--==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 MA...
AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ========================================================== AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability ==========================================================...
AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==-- Discovere...
AS-GasTracker 1.0.0 - Insecure Cookie Handling
AS-GasTracker 1.0.0 - Insecure Cookie Handling --==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==...
AS-GasTracker 1.0.0 - Insecure Cookie Handling
--==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 MA...
CVE-2008-1563
CVE-2008-1563 affects the Wireshark (formerly Ethereal) SCTP dissector, specifically the decode-as feature in packet-bssap.c. The issue exists in Wireshark versions 0.99.6 through 0.99.8, where a malformed packet can be crafted by a remote attacker to trigger an application crash (denial of servi...
Design/Logic Flaw
Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action...
CVE-2008-1132: Undefined Security Weakness
Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action...
CVE-2008-1134: Improper Authentication
OMEGA aka Omegasoft INterneSErvicesLosungen INSEL 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie...
CVE-2008-1132
Net Activity Viewer 0.2.1 has an untrusted search path vulnerability in src/mainwindow.c, enabling local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu invoked during Restart As Root. Impact: arbitrary code execution with the caller's privileges. Exploita...
WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution
Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/ http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert%22XSS%22%3C/script%3E 3 Remote...
PT-2007-6975 · Oracle · Javamail
Name of the Vulnerable Software and Affected Versions: Javamail affected versions not specified Description: The issue arises when Javamail fails to properly handle a series of invalid login attempts where the same e-mail address is used as both the username and password. Specifically, if the...
FreeBSD : plone -- unsafe data interpreted as pickles (ffba6ab0-90b5-11dc-9835-003048705d5a)
Plone projectreports : This hotfix corrects a vulnerability in the statusmessages and linkintegrity modules, where unsafe network data was interpreted as python pickles. This allows an attacker to run arbitrary python code within the Zope/Plone process. %NASLMINLEVEL 70300 C Tenable Network...
pjblog upload vulnerability-vulnerability warning-the black bar safety net
First of all have pjblog the super administrator accounteven is to take their blog to the test Log in, post a new log, pass an asp horse, and the extension to get rid of that pjblog seemingly didn't do the file header check, remember address Then login the backend, the recovery database before...
