3760 matches found
Directory traversal
Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...
CVE-2006-2839
Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...
CVE-2006-2839
CVE-2006-2839 affects WeBWorK Online Homework Delivery System (2.2.0 and earlier) via the PGProblemEditor.pm module. The vulnerability is a directory traversal that allows remote attackers to read and write files outside the templates directory. Exploitation details, affected versions, and precis...
CVE-2006-2839
Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...
Ubuntu 4.10 / 5.04 / 5.10 : mailman vulnerability (USN-267-1)
A remote Denial of Service vulnerability was discovered in the decoder for multipart messages. Certain parts of type 'message/delivery-status' or parts containing only two blank lines triggered an exception. An attacker could exploit this to crash Mailman by sending a specially crafted email to a...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in a phpAdsNew and b phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or 2 certain...
CVE-2006-1397
Multiple cross-site scripting XSS vulnerabilities in a phpAdsNew and b phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or 2 certain...
phpBB 2.0.18 - Remote Brute ForceDictionary (2)
phpBB 2.0.18 - Remote Brute ForceDictionary 2 !/usr/bin/perl Title: PhpBB Note: Host the php script and replace the line 34 Php script for the email option because win32 don't support Mail::Mailer Changelog: Bruteforce option | Starting length | Email option | More fast | Die error disabled |...
linux/x86 - TCP Proxy Shellcode 236 bytes
linux/x86 TCP Proxy Shellcode 236 bytes. Shellcode exploit for linx86 platform // proxylib.c - is located at http://www.milw0rm.com/id.php?id=1476 /str0ke / hey all.. this is my attempt at a very small very functional tcp proxy shellcode.. to pull this off i ignored the "socks" protocols and...
The Trojan client and server covert communication analysis-vulnerability warning-the black bar safety net
Modern Trojan horse to achieve is to establish in a reliable, but also easy to be the host found the communications program on the, this article is about the various programmes implemented method, the reliability, the safety made some theoretical discussion. Full understanding of Trojan horse...
Ubuntu 4.10 : bogofilter vulnerability (USN-26-1)
Antti-Juhani Kaijanaho discovered a Denial of Service vulnerability in bogofilter. The quoted-printable decoder handled certain Base-64 encoded strings in an invalid way which caused a buffer overflow and an immediate program abort. The exact impact depends on the way bogofilter is integrated int...
Ubuntu 4.10 : postfix vulnerability (USN-74-2)
This is an update to the recently published Ubuntu Security Notice USN-74-1, which fixed the delivery of arbitrary mail to any MX host which has an IPv6 address. Unfortunately that upgrade revealed an error in the package upgrade system which caused package installation to fail. After the failed...
CVE-2004-2506
CVE-2004-2506 affects WIKINDX prior to 0.9.9g. The vulnerability is an unparsed web content delivery flaw that allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file. The available sources describe the impact as information disclosure (partial con...
CVE-2004-2506
Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file...
CVE-2005-2662
masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...
CVE-2005-2662
masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...
CVE-2005-2662
Removed by vendor...
FreeBSD : sudoscript -- signal delivery vulnerability (85edfb6a-43a5-11d9-a9e7-0001020eed82)
If non-root access is enabled in sudoscript, any member of the ssers group can send a SIGHUP signal to any process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...
CVE-2004-2088
Sophos Anti-Virus 3.78 is affected. The vulnerability allows remote attackers to bypass the virus scan by crafting a qmail-generated Delivery Status Notification (DSN) that omits the original email in the bounce message. The core issue is the DSN handling during bounce processing, enabling bypass...