4969 matches found
MNOGoSearch 3.1.20 - 'search.cgi?UL' Remote Buffer Overflow (2)
source: https://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the 'search.cgi' application. It may ...
HTML.cobble
Sunday, April 1, 2001 Default installation of Internet Explorer 5.5 with all of its so-called patches, service "packs" etc, still allows us to execute files on default installations of the target computer: Once Again: We cobble together new and old Components as follows : - 1. Courtesy of Georgi...
Micro Focus Cobol 4.1 - Arbitrary Command Execution
Micro Focus Cobol 4.1 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2359/info Micro Focus Cobol is a development suite for unix platforms offered by Merant. It is typically licensed on a per-user basis. If Micro Focus Cobol is installed with the 'Apptrack' feature enable...
Micro Focus Cobol 4.1 - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/2359/info Micro Focus Cobol is a development suite for unix platforms offered by Merant. It is typically licensed on a per-user basis. If Micro Focus Cobol is installed with the 'Apptrack' feature enabled, local users may be able to elevate privileges. A...
Exploit Code for File Input field advisory.
I have coded an exploit example for the "File Upload via Form" vulnerability recently mentioned by Microsoft Security. Here's the source for it well, most of the source. If you would like the whole source, email me. I'll send it as an attachment. --------------snip------------------ !script...
Check Point Software Firewall-1 3.0/1 4.0/1 4.1 - Session Agent Dictionary Attack (1)
source: https://www.securityfocus.com/bid/1662/info A vulnerability exists in all versions of the Check Point Session Agent, part of Firewall-1. Session Agent works in such a way that the firewall will establish a connection back to the client machine. Upon doing so, it will prompt for a username...
Immunity Canvas: WUFTPD_SEXEC
Name| wuftpdsexec ---|--- CVE| CVE-2000-0573 Exploit Pack| CANVAS Description| WuFTPD SITE EXEC Formatstring Bug Notes| References: http://www.securityfocus.com/bid/1387 CVE Name: CVE-2000-0573 VENDOR: wuftpd.org Repeatability: Multiple tries Date public: 22-06-2000 CERT Advisory:...