CVE-2006-1548

CVE-2006-1548 is an XSS vulnerability in Apache Struts prior to 1.2.9. The flaw allows remote attackers to inject arbitrary script/HTML via the request parameter name in LookUpDispatchAction, and possibly DispatchAction and ActionDispatcher, with the error message not filtering the input. Connect...

CVE-2006-1547

ActionForm in Apache Software Foundation ASF Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to...

CVE-2006-1546

CVE-2006-1546 : Apache Struts 1.x before 1.2.9 is vulnerable to bypassing validation via a request param org.apache.struts.taglib.html.Constants.CANCEL, causing the action to be canceled but may not be detected by applications that skip isCancelled(). Affects Struts 1.x components and can lead to...

Mozilla Foundation Application Detection

There is at least one instance of Firefox, Thunderbird, SeaMonkey, or the Mozilla browser installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20862; scriptversion"1.83"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2006-0278

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS02 in the a CRM Technical Foundation component; 2 APPS03 in the b iProcurement component; and 3 APPS04, 4 APPS05, and 5 APPS06 in...

Design/Logic Flaw

Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln DB08...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS02 in the a CRM Technical Foundation component; 2 APPS03 in the b iProcurement component; and 3 APPS04, 4 APPS05, and 5 APPS06 in...

CVE-2006-0262

Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln DB08...

CVE-2006-0262

Technical details for CVE-2006-0262 are not publicly provided in the supplied documents; no explicit affected versions or remediation are included. Monitor for updates.

CVE-2006-0278

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS02 in the a CRM Technical Foundation component; 2 APPS03 in the b iProcurement component; and 3 APPS04, 4 APPS05, and 5 APPS06 in...

CVE-2005-4808

Buffer overflow in resetvars in config/tc-crx.c in the GNU as gas assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file...

phpMyAdminSQL.txt

phpMyAdmin serverprivileges.php SQL Injection Vulnerabilities. I. BACKGROUND phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. II. DESCRIPTION phpMyAdmin serverprivileges.php is prone to SQL Injection vulnerability. A remote attacker may execute...

Lutece XSS vuln.

Lutece XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/lutece-xss-vuln.html vendor:http://lutece.paris.fr affected version:1.2.3 and prior Product Description: Lutece is a web portal engine that lets you quickly create internet or intran...

phpMyAdmin server_privileges.php SQL Injection Vulnerabilities.

phpMyAdmin serverprivileges.php SQL Injection Vulnerabilities. I. BACKGROUND phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. II. DESCRIPTION phpMyAdmin serverprivileges.php is prone to SQL Injection vulnerability. A remote attacker may execute...

CVE-2004-2650

The CVE-2004-2650 entry concerns the Apache James spooler. Affected component: James 2.2.0 spooler retrieve function. Root cause: triggering various error conditions in the retrieve function can prevent a lock release, causing a memory leak and resulting in local-denial-of-service impact. The ava...

[Full-disclosure] DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'

DMA2005-1112a - 'Veritas Storage Foundation VCSI18NLANG buffer overflow' Author: Kevin Finisterre Vendor: http://www.Veritas.com Product: 'Veritas Cluster Server for UNIX' References: http://www.digitalmunition.com/DMA2005-1112a.txt http://www.symantec.com/avcenter/security/Content/2005.11.08a.ht...

SF_multi.pl.txt

!/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits from some Frenchie at FR-SIRT go to milw0rm instead. $retva...

Veritas Storage Foundation 4.0 - VCSI18N_LANG Local Overflow

Veritas Storage Foundation 4.0 - VCSI18NLANG Local Overflow !/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits...

Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit

Exploit for linux platform in category local exploits ================================================================== Veritas Storage Foundation 4.0 VCSI18NLANG Local Overflow Exploit ================================================================== !/usr/bin/perl -w Veritas Storage Foundatio...

Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit

No description provided by source. !/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits from some Frenchie at...