Sun Java System Web Server 6.17.0 - WebDAV Format String

Sun Java System Web Server 6.17.0 - WebDAV Format String source: https://www.securityfocus.com/bid/37910/info Sun Java System Web Server is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input. The issue affects the WebDAV functionality. Currently very...

Microsoft HTML Help Compiler (hhc.exe) - Buffer Overflow (PoC)

Microsoft HTML Help Compiler hhc.exe - Buffer Overflow PoC Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied...

Novell iPrint Client Multiple BOF Vulnerabilities - Linux

Novell iPrint Client is prone to multiple Buffer Overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell iPrint Client Multiple BOF Vulnerabilities (Windows)

This host is running Novell iPrint Client and is prone to multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelliprintclientmultbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell iPrint Client Multiple BOF Vulnerabilities Windows Authors: Sujit Ghosal...

Simple Directory Listing Cross Site Scripting

Security Advisory : Cross-Site Scripting flaw in Simple Directory Listing Discovered by == Amol Naik amolnaik4atgmaildotcom Overview -------------- Quote from from http://simpledirectorylisting.net/ : "Simple Directory Listing is a single file php script which functions as directory listing in an...

StoneTrip Ston3D Standalone Player Code Execution Vulnerability - Linux

StoneTrip Ston3D Standalone Player is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DodosMail 2.5 - dodosmail.php Local File Inclusion

DodosMail 2.5 - dodosmail.php Local File Inclusion source: https://www.securityfocus.com/bid/30112/info DodosMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings ...

White_Dune 0.29beta791 - Multiple Local Code Execution Vulnerabilities

WhiteDune 0.29beta791 - Multiple Local Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/27102/info WhiteDune is affected by a format-string vulnerability and a buffer-overflow vulnerability. Exploiting these issues can allow local attackers to execute arbitrary code in the...

Satel Lite - Satellite.php Local File Inclusion

Satel Lite - Satellite.php Local File Inclusion source: https://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information...

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow source: https://www.securityfocus.com/bid/25697/info The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of...

Jetbox CMS 2.1 Email - FormMail.php Input Validation

Jetbox CMS 2.1 Email - FormMail.php Input Validation source: https://www.securityfocus.com/bid/23989/info Jetbox CMS is prone to an input-validation vulnerabilitiy because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to send spam email in the context of th...

Caucho Resin 3.0.17/3.0.18 - Viewfile Information Disclosure

source: https://www.securityfocus.com/bid/18007/info Resin is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of arbitrary files from t...

C.J. Steele Tattle - Remote Command Execution

source: https://www.securityfocus.com/bid/13883/info tattle is affected by a remote command execution vulnerability. An attacker can supply arbitrary commands prefixed with the '|' character as a value for the 'tld' variable that will be executed in the context of the application. An attacker can...

C.J. Steele Tattle - Remote Command Execution

C.J. Steele Tattle - Remote Command Execution source: https://www.securityfocus.com/bid/13883/info tattle is affected by a remote command execution vulnerability. An attacker can supply arbitrary commands prefixed with the '|' character as a value for the 'tld' variable that will be executed in t...