7193 matches found
ASP Stats Generator <= 2.1.1 SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== ASP Stats Generator = 2.1.1 SQL Injection Vulnerabilities ========================================================== /------------------------------------------------ IHS Public...
ASP Stats Generator 2.1.1 - SQL Injection
ASP Stats Generator 2.1.1 - SQL Injection /------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP...
ASP Stats Generator 2.1.1 - SQL Injection
/------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP programming language. The application is able...
[SA19621] Aweb's Banner Generator "banner" Cross-Site Scripting
TITLE: Aweb's Banner Generator "banner" Cross-Site Scripting SECUNIA ADVISORY ID: SA19621 VERIFY ADVISORY: http://secunia.com/advisories/19621/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Aweb's Banner Generator 3.x http://secunia.com/product/9346/ Aweb's...
Multiple NetBSD security vulnerabilities
RNG generator non-random strem generation, DoS conditions...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...
CVE-2006-1699
Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...
CVE-2006-1699
Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...
CVE-2006-1699
CVE-2006-1699 describes a Cross-site scripting (XSS) vulnerability in index.php of Aweb Banner Generator 3.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode. According to the NVD entry, the affected software is Aweb Banner...
AWeb's Banner Generator 3.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/17416/info AWeb's Banner Generator is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...
Buffer overflow
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...
CVE-2006-0459
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...
CVE-2006-0459
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...
CVE-2006-0459
CVE-2006-0459 affects the Fast Lexical Analyzer Generator (flex) before version 2.5.33. The issue is a memory allocation fault when processing grammars that contain REJECT statements or trailing context rules, causing generated code to contain a buffer overflow. This could allow context-dependent...
flex fast lexical analyzer generator buffer overflow
Buffer overflow on REJECT rule parsing...
[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1020-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation
-------------------------------------------------------------------------- Debian Security Advisory DSA 1020-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...
Design/Logic Flaw
PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator C++ rand function during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand seed values an...
PasswordSafe 3.0 weak random number generator allows key recovery attack
Title : PasswordSafe 3.0 weak random number generator allows key recovery attack Date : March 23, 2006 Product : PasswordSafe 3.0 Discovered by : ElcomSoft Co.Ltd. Overview ====================================================================== PasswordSafe is a program originally written by...