7081 matches found
Debian DSA-956-1 : lsh-server - filedescriptor leak
Stefan Pfetzing discovered that lshd, a Secure Shell v2 SSH2 protocol server, leaks a couple of file descriptors, related to the randomness generator, to user shells which are started by lshd. A local attacker can truncate the server's seed file, which may prevent the server from starting, and wi...
Web Trojan review-vulnerability warning-the black bar safety net
Article author: Golden State Information source: evil octal information security team www.eviloctal.com） Web Trojan review Preface and 8 months. The write stuff has been written is not a good thing. About or talent deficiencies, the effort is not enough. Although 才疏学浅, or stick to try a month out...
CVE-2006-3580
SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter...
CVE-2006-3580
SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter...
CVE-2006-3580
CVE-2006-3580 describes an SQL injection in pages.asp of the ASP Stats Generator before 2.1.2. Remote attackers can execute arbitrary SQL commands via the order parameter. The CVSS data (base 7.5, HIGH) indicates Potential impact to confidentiality, integrity, and availability (partial for each)....
[NT] ASP Stats Generator Multiple Vulnerabilities (SQL Injection, Code Execution)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
HashCash antispam token generator array overflow
Heap array overflow...
Track"Warcraft Games"the Trojan of password transmission mode-bug warning-the black bar safety net
Review: If your system does not accidentally infected with a Trojan virus,and unfortunately the game account password or your QQ password has to be others to steal. Then,we identify the virus,if the virus is found in the"stallion"of the"contact information"? If you are lucky, not only can get bac...
ASP Stats Generator <= 2.1.1 SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== ASP Stats Generator = 2.1.1 SQL Injection Vulnerabilities ========================================================== /------------------------------------------------ IHS Public...
ASP Stats Generator 2.1.1 - SQL Injection
ASP Stats Generator 2.1.1 - SQL Injection /------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP...
ASP Stats Generator 2.1.1 - SQL Injection
/------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP programming language. The application is able...
[SA19621] Aweb's Banner Generator "banner" Cross-Site Scripting
TITLE: Aweb's Banner Generator "banner" Cross-Site Scripting SECUNIA ADVISORY ID: SA19621 VERIFY ADVISORY: http://secunia.com/advisories/19621/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Aweb's Banner Generator 3.x http://secunia.com/product/9346/ Aweb's...
Multiple NetBSD security vulnerabilities
RNG generator non-random strem generation, DoS conditions...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...
CVE-2006-1699
Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...
CVE-2006-1699
Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...
CVE-2006-1699
CVE-2006-1699 describes a Cross-site scripting (XSS) vulnerability in index.php of Aweb Banner Generator 3.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode. According to the NVD entry, the affected software is Aweb Banner...
AWeb's Banner Generator 3.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/17416/info AWeb's Banner Generator is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...
Buffer overflow
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...
CVE-2006-0459
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...