Mozilla Firefox 3.5.3 / SeaMonkey 1.1.17 - 'libpr0n' .GIF Parser Heap Buffer Overflow

source: https://www.securityfocus.com/bid/36855/info Mozilla Firefox and SeaMonkey are prone to a heap-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code and to cause denial-of-service conditions by tricking a victim into visiting a malicious webpage...

Snort 2.8.5 - Multiple Denial of Service Vulnerabilities

Snort 2.8.5 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/36795/info Snort is prone to multiple denial-of-service vulnerabilities because the application fails to properly process specially crafted IPv6 packets. Attackers can exploit these issues to crash...

OpenDocMan 1.2.5 - user.php Cross-Site Scripting

OpenDocMan 1.2.5 - user.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

AfterLogic WebMail Pro Multiple Cross Site Scripting Vulnerabilities

AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-...

Dopewars Server 'REQUESTJET' Message Remote Denial of Service Vulnerability

Dopewars is prone to a denial of service DoS vulnerability that affects the server part of the application. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Achievo 1.x - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Achievo 1.x - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/36661/info Achievo is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML...

Adobe Reader 9.1.3 Acrobat - COM Objects Memory Corruption Remote Code Execution

Adobe Reader 9.1.3 Acrobat - COM Objects Memory Corruption Remote Code Execution source: https://www.securityfocus.com/bid/36668/info Adobe Reader and Acrobat are prone to a remote code-execution vulnerability because they fail to properly handle certain COM objects. An attacker can exploit this...

Google Apps googleapps.url.mailto handler command injection

Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...

Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability

Ability Mail Server is prone to a denial of service DoS vulnerability because it fails to adequately handle IMAP requests. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Xlpd 3.0 Remote DoS Vulnerability

Xlpd is prone to a denial of service DoS vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FTPShell Client PASV Command Buffer Overflow Vulnerability

FTPShell Client is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ftpshell:ftpshell";...

nginx HTTP Request Remote Buffer Overflow Vulnerability

nginx is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Microsoft Windows Patterns & Practices EntLib DOS Vulnerability

This host has Microsoft Windows Patterns & Practices Enterprise Library installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmswppenterpriselibraryredosvuln.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft Windows Patterns & Practices EntLib DOS...

Juniper Junos 8.5/9.0 J-Web Interface - '/configuration' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...

Mambo 4.6.3 Arbitrary File Upload

Step 1 Using post method send file to: http://victim.com/mambo4.6.5/mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php?Command=FileUpload file should have one of the following extensions: zip, doc, xls, pdf, rtf, csv, jpg, gif, jpeg, png, avi, mpg, mpeg, swf, fla...

GNU glibc 2.x - strfmon() Integer Overflow

GNU glibc 2.x - strfmon Integer Overflow source: https://www.securityfocus.com/bid/36443/info GNU glibc is prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application...

Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service)

source: https://www.securityfocus.com/bid/36408/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application and deny service to legitimate users. These issues affect Wireshark 0.99.6 through 1.2.1...

Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service)

Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/36408/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application and deny service to legitimate users...

Match Agency BiZ - edit_profile.php?important Cross-Site Scripting

Match Agency BiZ - editprofile.php?important Cross-Site Scripting source: https://www.securityfocus.com/bid/42976/info Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

HTMLDOC 1.8.27 Buffer Overflow

/ HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: http://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Kohli http://www.pank4j.com pankaj@zion:/test/htmldoc$ cat...