Mercur MailServer 5.0 SP3 - 'IMAP' Denial of Service

/ Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory : http://secunia.com/advisories/19267/ Coder : Omnipresent Email : [email protected] Description : Tim Taylor has discovered a vulnerability in Mercur Messaging 2005, which can be exploited by malicious people and by malicious users to cause a...

CVE-2006-0888

index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...

[BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 7 | Feb 14th, 2006 | --------------------------------------------------- | Vendor | Mantis BT | | URL | http://www.mantisbt.org/ | | Version | = Mantis 1.00rc4 | | Risk ...

Invision Power Board 2.1.4 - Register Users Denial of Service

!/usr/bin/perl use IO::Socket; | | | \ | | |/ IPB Register Multiple Users Denial of Service Doesn't Work on forums using "Code Confirmation" Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL print q Invision Power Board Multiple Users DOS Tested on IPB 2.0.1 create...

Ubuntu 5.04 : kdewebdev vulnerability (USN-115-1)

Eckhart Worner discovered that Kommander opens files from remote and possibly untrusted locations without user confirmation. Since Kommander files can contain scripts, this would allow an attacker to execute arbitrary code with the privileges of the user opening the file. The updated Kommander wi...

Net Portal Dynamic System 5.0 - Register Users Denial of Service

!/usr/bin/perl Type|+ Register multiple users for Denial of Service Vendor url|+ www.npds.org Little description|+ NPDS Net Portal Dynamic System is a Frenchand now English ! GNU dynamic portal Solution|+ None official but you can add a visual confirmation if you like php ; Worked on|+ Last...

SMS bombing(figure)-vulnerability warning-the black bar safety net

The phone and the network have long been inextricably linked, through the network, can send information directly to the phone, just now no free send SMS website, if you want the site to send text messages on your phone, you must first register the user, after confirmation before you can send...

CVE-2005-0590

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...

CVE-2005-0754

Removed by vendor...

Interspire ArticleLive 2005 (php version) is vulnerable to XSS

Can you please confirm my suggestion that: Interspire ArticleLive 2005 php version is vulnerable to XSS: e.g. http://localhost/articles/newcomment?ArticleId="scriptalert'hi'/script // best wishes, mircia [email protected]...

CVE-2005-0590

CVE-2005-0590 affects Firefox <1.0.1, Thunderbird <1.0.1, and Mozilla

Microsoft Internet Explorer 6 SV 1 XHTML Comment User Confirmation Bypass

Binary data 2301.prm...

DSA-518 kdelibs - unsanitised input

Bulletin has no description...

TREND MICRO: The Protector Becomes The Vector Take II

Monday, June 07, 2004 !-- 1. When the product alerts it creates an html file in the temporary file of the user's machine the so-called "local zone" screen shot: http://www.malware.com/weallcar.png 29KB This html file is viewed from an Internet Explorer "browser object" and indicates what file is...

Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass

source: https://www.securityfocus.com/bid/10227/info Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability. This issue is due to a race condition error that allows a malicious programmer to send SMS messages from unsuspecting cellular telephone user's telephon...

Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass

Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass source: https://www.securityfocus.com/bid/10227/info Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability. This issue is due to a race condition error that allows a malicious programmer to send...

cpanelroot.txt

Hi all when i tried to rest my pass i'm tried this url: http://cpanel.com:2082/resetpass/?user=|"ls"| it give me this / sh: line 1: /var/cpanel/users/: is a directory "sh: line 1: ls: command not found" Password Reset Resetting password for |"ls"|: A confirmation email has been sent to the email...

Microsoft Internet Explorer - URL Injection in History List (MS04-004)

Microsoft Internet Explorer - URL Injection in History List MS04-004 // Andreas Sandblad, 2004-02-03, patched by MS04-004 // Name: payload // Purpose: Run payload code called from Local Machine zone. // The code may be arbitrary such as executing shell commands. // This demo simply creates a...

Microsoft IIS 404 Response Service Pack Signature

The Patch level Service Pack of the remote IIS server appears to be lower than the current IIS service pack level. As each service pack typically contains many security patches, the server may be at risk. Note that this test makes assumptions of the remote patch level based on static return value...

Trillian 0.74 - Remote Denial of Service

Trillian 0.74 - Remote Denial of Service / -------------------------------------------- :::::::::::::::::: trillian 0.7d patch :::::Denial:of:Service::simple:exploit:: -----------------------------l0bstah----- usage :: : trillah name attacked-nick comment:: after patch .74d, exploits, wich use...