CVE-2006-3952

Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3952: Undefined Security Weakness

Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3844

Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the LIST command, a different issue than CVE-2006-2027...

CVE-2006-3844

CVE-2006-3844 / CVE-2006-2027 family involves a buffer overflow in Quick ’n Easy FTP Server (3.0) affecting the server’s handling of long arguments during FTP commands. The issue is described as a buffer overflow in the Unicode/logging processing path, which can allow remote authenticated users t...

CVE-2006-3844

Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the LIST command, a different issue than CVE-2006-2027...

CVE-2006-3844: Undefined Security Weakness

Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the LIST command, a different issue than CVE-2006-2027...

Preemptive Protection against CesarFTP and XM Easy Personal FTP Server Buffer Overflow Vulnerabilities

XM Easy Personal FTP Server fails to validate user-supplied data. Attacker can exploit this issue to execute arbitrary code on the affected server. CesarFTP contains a buffer overflow error in the handling of overly long arguments passed to the MKD command. Remote attackers can compromise a...

xmepftp.txt

!/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port and multiple commands with A%n,...

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

easycms.txt

Easy CMS 0.1.2 Php Shell Upload Vulnerabilities ---------------------------------------------------- site:http://sourceforge.net/projects/php-easy-cms/ demo:http://www.easy-cms.be/ -------------------------------------------------- Bug: 1http://victim/choosefile.php Documents Images Scripts Style...

XM Easy Personal FTP Server 5.0.1 (Port) Remote Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================ XM Easy Personal FTP Server 5.0.1 Port Remote Overflow PoC ============================================================ !/usr/bin/perl...

XM Easy Personal FTP Server 5.0.1 (Port) Remote Overflow PoC

No description provided by source. !/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port and multiple commands wit...

XM Easy Personal FTP Server 5.0.1 - Port Remote Overflow (PoC)

XM Easy Personal FTP Server 5.0.1 - Port Remote Overflow PoC !/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port...

XM Easy Personal FTP Server 5.0.1 - 'Port' Remote Overflow (PoC)

!/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port and multiple commands with A%n,...

CVE-2006-3128

choosefile.php in easy-CMS 0.1.2, when modmime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories...

CVE-2006-3128

choosefile.php in easy-CMS 0.1.2, when modmime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories...

CVE-2006-3128

The CVE-2006-3128 issue affects easy-CMS 0.1.2 when mod_mime is active: the upload check does not restrict filenames with multiple extensions, enabling an attacker to upload a PHP file named with a GIF extension and then access it in the Repositories directory to achieve arbitrary PHP code execut...

CVE-2006-3128: Undefined Security Weakness

choosefile.php in easy-CMS 0.1.2, when modmime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories...

Easy CMS 0.1.2 Php Shell Upload Vulnerabilities

Easy CMS 0.1.2 Php Shell Upload Vulnerabilities ---------------------------------------------------- site:http://sourceforge.net/projects/php-easy-cms/ demo:http://www.easy-cms.be/ -------------------------------------------------- Bug: 1http://victim/choosefile.php Documents Images Scripts Style...

HotPlugCMS_1.0 - SQL Injection Vulnerability

HotPlugCMS doesn't check input field values, so logging in on /hotplugcms/administration/tblcontent is very easy with ' OR 1=1 / and a SQL-inject will bypass the entire authentication process. Typical, very simple SQL Injection. peda...