CVE-2006-1699: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...

AWeb's Banner Generator 3.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/17416/info AWeb's Banner Generator is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...

Buffer overflow

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...

CVE-2006-0459

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...

CVE-2006-0459

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...

CVE-2006-0459

CVE-2006-0459 affects the Fast Lexical Analyzer Generator (flex) before version 2.5.33. The issue is a memory allocation fault when processing grammars that contain REJECT statements or trailing context rules, causing generated code to contain a buffer overflow. This could allow context-dependent...

[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1020-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...

flex fast lexical analyzer generator buffer overflow

Buffer overflow on REJECT rule parsing...

[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1020-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...

Design/Logic Flaw

PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator C++ rand function during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand seed values an...

PasswordSafe 3.0 weak random number generator allows key recovery attack

Title : PasswordSafe 3.0 weak random number generator allows key recovery attack Date : March 23, 2006 Product : PasswordSafe 3.0 Discovered by : ElcomSoft Co.Ltd. Overview ====================================================================== PasswordSafe is a program originally written by...

CVE-2006-1378: Undefined Security Weakness

PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator C++ rand function during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand seed values an...

CVE-2005-4730

Technical details (affected versions, impact, exploit info, and remediation) for CVE-2005-4730 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2005-4730

Unspecified vulnerability in PEAR TextPassword 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds...

CVE-2005-4730: Undefined Security Weakness

Unspecified vulnerability in PEAR TextPassword 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds...

CVE-2006-0936

The CVE-2006-0936 entry concerns Free Host Shop Website Generator 3.3. It describes a vulnerability where remote authenticated users with administrative privileges can upload and execute arbitrary files via a formname parameter using a filename containing a dangerous extension and a trailing %00....

CVE-2006-0936: Undefined Security Weakness

Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00...

NSA Group Security Advisory NSAG-№202-25.02.2006 Vulnerability WEBSITE GENERATOR 3.3

Advisory: NSAG-№202-25.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: WEBSITE GENERATOR 3.3 Site of manufacturer: http://freehostshop.com The status: 19/11/2005 - Publication is postponed...

NSAG-202-25.02.2006.txt

Advisory: NSAG-¹202-25.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: WEBSITE GENERATOR 3.3 Site of manufacturer: http://freehostshop.com The status: 19/11/2005 - Publication is postponed...

FreeHostShop Website Generator 3.3 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/16823/info Website generator is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate unauthorized access or privile...