CVE-2007-0431

AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...

CVE-2007-0431

CVE-2007-0431 affects AVM FRITZ!Box devices (e.g., Fritz!Box 7050) with a VoIP/SIP service. The vulnerability is triggered by sending a zero-length UDP packet to the SIP port (5060), which can cause a denial-of-service (VoIP application crash). Connected sources (NVD/OpenVAS) confirm the affected...

AVM FRITZ!Box VoIP远程拒绝服务漏洞

FRITZ！Box是AVM公司开发出的无线连接电脑与音响、电视的盒子，可以通过无线局域网连接将电脑里的所有数字内容传输到高档音响设备和大型等离子电视上。 FRITZ！Box在处理某些UDP报文时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果向Fritz!Box的5060 （SIP）端口发送了0长度的UDP报文的话，就会导致VoIP电话应用程序崩溃。 AVM Fritz!Box 7050 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

DoS against AVM Fritz!Box 7050 (and others)

Denial of Service against AVM Fritz!Box 7050 and others Discovered by: Matthias Wenzel Advisory: http://mazzoo.de/blog/2007/01/18FritzBoxDoS Manufacturer: AVM www.avm.de Product: Fritz!Box 750 and others Vendor was notified 6 month ago see blog entry by Matthias Sending a zero-length UDP packet t...

AVM Fritz!Box VoIP router DoS

Crash on empty UDP packet to UDP/5060 SIP port...

Yet Another Link Directory v1.0

Yet Another Link Directory v1.0 http://yald.sourceforge.net/ Effected files: yald.php --------------------------- yald.php search box XSS User input isn't sanatized before being generated. In the search box for a PoC put: script src=http://www.youfucktard.com/xss.js/script url:...

CVE-2006-6769

Multiple cross-site scripting XSS vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchstring parameter in a setup/transcripts.php, the 2 l parameter in b index.php, the 3 login field in c phplive/index.php, and the 4 deptid...

CVE-2006-6583

ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to 1 the Logins box and 2 the Search box...

CVE-2006-6582

Multiple cross-site scripting XSS vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 membersusername user and 2 memberspassword password fields in a login action in members/default.asp, and 3 the Search box. NOTE: som...

CVE-2006-6583

ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to 1 the Logins box and 2 the Search box...

CVE-2006-6534

Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...

phpbb 2.0.x [xss]

vendor site:http://phpbb.com/ product:phpbb bug:xss risk:low A xss post has been discovered in phpbb ,the impact of this attack is very low ,because it's more a bug , than a vulnerability . An authentificated user can excute some html code in his private message box , by sending a message to an...

Busy Box web server directory traversal

Directory traversal with /2e2e...

Simple manual to create the ultimate Trojan horse—talk for some back door of the simple modifications-vulnerability warning-the black bar safety net

First talk about the Radmin That Radmin was a good thing, I also recently discovered this stuff benefits, such as not to be killed, management is very convenient, speed is also very fast, simple configuration...... Anyway, I see a lot of the Administrator's selection of this. Although is a good...

OZJournal15.txt

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

security flaw

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...

security flaw

Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control...

security flaw

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...

DEBIAN-CVE-2006-3811

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via Javascript that leads to memory corruption, including 1...