3775 matches found
Design/Logic Flaw
Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors...
mxBB Module Activity Games 0.92 - Remote File Inclusion
mxact mxBB Games Module --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/index.php?page=4&action=file&fileid=71 Problem area: if !fileexists$mxrootpath . 'modules/mxact/language/lang' . $boardconfig'defaultlang' . '/langactivity.'.$phpEx...
Hacker attack and Defense of the PPPoE authentication and use-vulnerability and early warning-the black bar safety net
A Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed explosive growth, the operators in the use of xDSL, LAN, HFC, wireless and other access methods at the same time, in order to build an operable, manageable and profitable broadband network, is very...
osTicket.txt
script:- osTicket Open Source Support Ticket System site:- http://www.osticket.com exploit by runvirus http://www.host/path/include/openform.php?includedir= welcome in www.sec-area.com...
security flaw
The hugepage code hugetlb.c in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a denial of service crash by triggering an mmap error before a prefault, which causes an error in the unmaphugepagearea function...
CVE-2006-4795: Undefined Security Weakness
Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport software in HP-UX B.11.11 and B.11.23 before 20060912 allows local users to cause a denial of service via unspecified vectors...
CVE-2004-2665: Undefined Security Weakness
Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport software in HP-UX B.11.00, B.11.04, and B.11.11 before 20040628 allows local users to cause a denial of service via unspecified vectors...
ezportal.txt
:: Ezportal/Ztml v1.0 Multiple vulnerabilities :: ------------------------------------------------ Software : Ezportal/Ztml Website : http://www.ztml.org Bug Discover : Hessam-x / www.hessamx.net I. Multiple Cross Site Scripting Vulnerabilities -------------------------------------------------...
CVE-2006-4502
ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the "Administration Area" script...
CVE-2006-4502
The CVE-2006-4502 entry concerns ezPortal/ztml CMS 1.0, where remote attackers can bypass authentication by accessing the direct Administration Area script. Affected component is the Administration Area authentication check; the underlying cause is bypass of access controls, enabling unauthentica...
CVE-2006-4502: Undefined Security Weakness
ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the "Administration Area" script...
LAN-tapping, anti-tool details-vulnerability warning-the black bar safety net
Editor's Note:This article is the defense of the meaning is greater than the attack. Within the same LAN, using the same type of tools to each other to attack, the result is-Can the Internet! Each other understand, and consciously for the download speed limit,“the harmonious Internet”is the right...
JavaScript code can cause the browser attack-vulnerability warning-the black bar safety net
Security researchers have found a Use JavaScript to scan the family and the enterprise network, and attacks on the network server, and the router and printer and other equipment of the method. Researchers say the malicious JavaScript code can be embedded in a Web page, use the browser to browse t...
FlexWATCH 3.0 - AIndex.asp Authentication Bypass
FlexWATCH 3.0 - AIndex.asp Authentication Bypass source: https://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass...
FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass
source: https://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass the authorization mechanism. This allows the...
Mathcad Area Lock Vulnerability
Description of Vulnerability ============================ One of the features of Mathcad www.mathsoft.com is allowing the user to define ‘Areas’. Mathsoft say that ‘You can use areas to protect, lock, or hide information or equations in your worksheets’ and that ‘You can also protect the contents...
Techno Dreams GuestBook Remote XSS Exploit
------------------------------------------------------------------ - Techno Dreams GuestBook Remote XSS Exploit - -= http://colander.altervista.org/advisory/TDGuestBook.txt =- ------------------------------------------------------------------ -= Techno Dreams GuestBook Latetest Version =-...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 level, 2 position, 3 id, and 4 action parameters to membersonly/index.cgi, and the 5 page parameter to customerarea/index.cgi...
CVE-2006-1756
MD News 1 is affected by CVE-2006-1756: remote attackers can bypass authentication via a direct request to a script in the Administration Area. The vulnerability enables auth bypass, with CVSS v2.0 base metrics: 7.5 (HIGH) with Network attack vector, Low complexity, no user interaction. Impact de...