Spooky Login Multiple HTML Injection Vulnerability

This is a user management program where the users can register themselves by providing their username and passwords for protecting their webcontents. This program provide features like remembering login with cookies, automatic login, extended user info, expire user by date, admin can activate...

XMPlay 3.3.0.4 (M3U Filename) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== XMPlay 3.3.0.4 M3U Filename Local Buffer Overflow Exploit =========================================================== /...

Solaris 9 (sparc) : 116296-21

Sun One Application Server 7.0: Java Activation Framework Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 116296-21

Sun One Application Server 7.0: Java Activation Framework Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2006-2933

kdesktoplock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux RHEL 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually locking the desktop...

Track"Warcraft Games"the Trojan of password transmission mode-bug warning-the black bar safety net

Review: If your system does not accidentally infected with a Trojan virus,and unfortunately the game account password or your QQ password has to be others to steal. Then,we identify the virus,if the virus is found in the"stallion"of the"contact information"? If you are lucky, not only can get bac...

Novell Client login form enables reading and writing from and to the clipboard of the logged-in user

Suggested Risk Level: Low. Type of Risk: Information Leakage, Information Injection, Unauthorized Access. Affected Software: Novell Client for Windows, versions 4.9 and 4.8 On windows XP Pro and Windows 2000 Workstation. This versions are the only one tested, thus other version may be vulnerable ...

CVE-2006-0632

The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...

Design/Logic Flaw

The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...

CVE-2006-0632

The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...

CVE-2006-0632

The CVE-2006-0632 entry affects phpBB 2.0.19. The gen_rand_string function uses insufficiently random data (small value space) to generate the activation key (validation ID) sent by e-mail when establishing a password, enabling remote attackers to obtain the key and modify passwords for existing ...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities

realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12494/info Multiple remote vulnerabilities reportedly affect RealNetworks RealArcade. The first issue allows for arbitrary file deletion due to an input validation issue. The second issue is an...

CVE-2004-0116

CVE-2004-0116 maps to a Denial-of-Service in the RPCSS Service involved with DCOM activation. The issue is triggered by specially crafted activation requests that exhaust memory when the RPCSS service fails to reclaim discarded memory, leading to remote DoS on affected Windows versions. Affected ...

PT-2003-1814 · Microsoft · Windows 2000 +3

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352...

CVE-2002-1017

Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the activation code...

wbbboard 1.1.1 registration _new_users_vulnerability_

wbbboard 1.1.1 registration newusersvulnerability -------------------------------------------------- wbbboard : i cant find any contact info in credits : i send a message to wbbhacks.de and mywbb.de support forums, they didnt reply for 3 days i think enough Affected program : wbbboard 1.1.1 Vendo...

Microsoft Windows Media Player 7.0 - '.asx' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1980/info Windows Media Player is an application used for digital audio, and video content viewing. An unsafe buffer copy involving remotely-obtained data exists in the Active Stream Redirector ASX component in Windows Media Player. The ASX enables a user...

yahoo-pager-id.txt

Date: Fri, 25 Dec 1998 09:31:21 -0600 From: Nathan Neulinger Reply-To: Bugtraq List To: [email protected] Subject: Yahoo Pager - security bug w/ services 7,8 I've been working on a GTK unix yahoo pager client based on Doug Winslow's yppro2.c source and found the following security problem whil...

nsover.txt

http://www.rootshell.com/ From [email protected] Wed Oct 21 18:00:09 1998 Date: Wed, 21 Oct 1998 19:23:45 -0500 From: Mr. Nothing To: [email protected] Subject: Netscape Buffer Overflow Here is a buffer overflow exploit for Netscape on x86 Linux. It can be activated remotely by the followi...