8747 matches found
Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Back-End CMS start'main'; / Use Example ... /code / http://www.site.com/Back-Endpath/BEconfig.php?PSLclassdir=evilscripts Elo ;- 0day.today 2018-03-19...
security flaw
The ECNE chunk handling in Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service kernel panic via an unexpected chunk when the session is in CLOSED state...
USN-285-1: awstats vulnerability
AWStats did not properly sanitize the 'migrate' CGI parameter. If the update of the stats via web front-end is allowed, a remote attacker could execute arbitrary commands on the server with the privileges of the AWStats server. This does not affect AWStats installations which only build static...
How in does not support the Upload file to the forum file upload-vulnerability warning-the black bar safety net
How in the does not support file upload Forum, Upload File To achieve this goal, there is a prerequisite for this forum to be able to upload pictures. Commonly used Picture format is generally as JPEG, this format is FFD9 as the end-of-file Mark, as to which after the Deposit of anything on the...
FreeBSD : awstats -- arbitrary command execution vulnerability (2df297a2-dc74-11da-a22b-000c6ec775d9)
OS Reviews reports : If the update of the stats via web front-end is allowed, a remote attacker can execute arbitrary code on the server using a specially crafted request involving the migrate parameter. Input starting with a pipe character '|' leads to an insecure call to Perl's open function an...
awstats -- arbitrary command execution vulnerability
OS Reviews reports: If the update of the stats via web front-end is allowed, a remote attacker can execute arbitrary code on the server using a specially crafted request involving the migrate parameter. Input starting with a pipe character "|" leads to an insecure call to Perl's open function and...
[slackware-security] mozilla security/EOL
New Mozilla packages are available for Slackware 10.0, 10.1, 10.2 and -current to fix multiple security issues. More details about the issues may be found here: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlmozilla Also note that this release marks the EOL End Of Life for the...
Linksys RT31P2 VoIP router denial of service vulnerabilities
Overview The Linksys RT31P2 VoIP router contains several vulnerabilities that may allow a remote, unauthenticated attacker to cause a denial of service. Description The Linksys RT31P2 is a broadband router that includes Voice over Internet Protocol VoIP telephone functionality. The RT31P2 unit...
CVE-2006-0008
The ShellAbout API call in Korean Input Method Editor IME in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, whi...
Input validation
The ShellAbout API call in Korean Input Method Editor IME in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, whi...
[VulnWatch] fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321)
fetchmail-SA-2006-01: crash when bouncing messages. Topics: 1 crash when bouncing a message 2 fetchmail 6.2.5.X end of life Author: Matthias Andree Version: 1.0 Announced: 2006-01-22 Type: free with bogus pointer Impact: fetchmail crashes Danger: low Credits: Nathaniel W. Turner bug report CVE...
security flaw
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...
[BUGZILLA] Security advisory for Bugzilla < 2.16.11
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bugzilla Security Advisory ========================== December 27, 2005 Summary ======= Bugzilla is a Web-based bug-tracking system, used by a large number of software projects. This advisory covers an insecure temporary filename handling issue in...
security flaw
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...
DELPHI Trojan DIY simple service end and customer service end of the production-vulnerability and early warning-the black bar safety net
The author of the article: the God of the restricted area Information source: evil octal information security teamwww.eviloctal.com to DELPHI Trojan DIY simple service end and customer service end of production DELPHI write a simple control Trojan is actually not at all difficult Why? Told me to...
RHEL 2.1 : libuser (RHSA-2005:770)
Updated libuser packages that fix various security issues are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The libuser library implements a standardized interface for manipulating and administering user and group accounts. The...
GLSA-200510-07 : RealPlayer, Helix Player: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200510-07 RealPlayer, Helix Player: Format string vulnerability 'c0ntex' reported that RealPlayer and Helix Player suffer from a heap overflow. Impact : By enticing a user to play a specially crafted realpix .rp or realtext .rt...
security flaw
The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service kernel crash...
iDEFENSE Security Advisory 06.22.05: IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability
IpSwitch WhatsUp Professional 2005 SP1 SQL Injection Vulnerability iDEFENSE Security Advisory 06.22.05 www.idefense.com/application/poi/display?id=268&type=vulnerabilities June 22, 2005 I. BACKGROUND WhatsUp Professional 2005 SP1 is a network management solution for small and mid sized...
CVE-2005-1250
SQL injection vulnerability in the logon screen of the web front end NmConsole/Login.asp for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the 1 User Name field sUserName parameter or 2 Password sPassword parameter...