CVE-2007-2213

CVE-2007-2213 affects Ipswitch WS FTP 2007 (WS_FTP Home/Professional 2007). The vulnerability is in the Initialize function of NetscapeFTPHandler, causing a denial of service (NULL dereference and application crash) via unspecified vectors related to “improper arguments.” Exploitation status is n...

CVE-2007-2213

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...

WS_FTP Home空指针引用远程拒绝服务漏洞

WSFTP Home是一个快速、强大的FTP客户程序。 WSFTP Home的NetscapeFTPHandler函数在处理用户输入时存在空指针引用，本地攻击者可能利用此漏洞对服务器程序造成拒绝服务。 ESI 00000000 75DC3E09 MOVZX EAX,WORD PTR ESI 如果以不正确的参数执行函数的话： int Initialize char str1, char str2 就可能触发这个漏洞，导致拒绝服务。 Ipswitch WSFTP Home 2007 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Remote file inclusion

PHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the home parameter...

CVE-2006-7078

Multiple cross-site scripting XSS vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 vorname, and 3 nachname parameters in the register script. NOTE: some details have been obtained from...

Unfixed XSS vulnerability at home.1asphost.com

Security researcher SCRiPToRiuM, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting home.1asphost.com, which at the time of submission ranked 10132 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is...

MDKA-2006:056 : drakxtools

Several bugs were fixed in drakxtools: - it was not possible to start rpmdrake from the menu 26383 - it was not possible to set up updates media and then distro media or the reverse in edit-urpm-sources - drakauth: o add encrypted home and pammount support o hide password when calling 'net join' ...

Opera security advisory 2004-12-10

Named frames or windows can be hi-jacked by malicious frames or windows. Periods in the file name and non-breaking spaces in the Content-Type header can make the save/open dialog misleading. A user may be convinced that an executable file is something else, for example a PDF document. Applets hav...

CVE-2007-0849

scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which allows local users to gain privileges by placing shell metacharacters in a directory name, and then using the control panel to protect this directory, a different vulnerability tha...

CVE-2007-0406

Multiple buffer overflows in the 1 main function in a client.c, and the 2 serversetup and 3 serverclientconnect functions in b server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service daemon crash or gain privileges via a long HOME environment variable. NOTE: some of the...

Buffer overflow

Multiple buffer overflows in the 1 main function in a client.c, and the 2 serversetup and 3 serverclientconnect functions in b server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service daemon crash or gain privileges via a long HOME environment variable. NOTE: some of the...

CVE-2007-0406

Multiple buffer overflows in the 1 main function in a client.c, and the 2 serversetup and 3 serverclientconnect functions in b server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service daemon crash or gain privileges via a long HOME environment variable. NOTE: some of the...

CVE-2007-0406

Removed by vendor...

SH-News 0.93 - 'misc.php' Remote File Inclusion

!/usr/bin/perl SH-News 0.93 misc.php Remote File Include Exploit Download: http://www.scripthome.de/down.php?id=6 Vulnerable Code: require "$newscfg'path'/german.inc.php"; Coded by bd0rk || SOH-Crew Usage: shnews.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, rgod use...

Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit

No description provided by source. -- -- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi [email protected] -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g --...

Oracle 9i/10g - 'extproc' Local/Remote Command Execution

-- -- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g -- allows remote attackers to access arbitrary libraries...

PHPFullAnnu Home.Module.PHP远程文件包含漏洞

PHPFullAnnu是一款基于PHP的WEB应用程序。 PHPFullAnnu不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Home.Module.PHP'脚本对用户提交的'repmod'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 phpFullAnnu phpFullAnnu 5.1 http://pfa.netsliver.com/fr/actus.html http://www.example.com/Script...

PHPFullAnnu Home.Module.PHP参数远程文件包含漏洞

PHPFullAnnu是一款基于PHP的WEB应用程序。 PHPFullAnnu不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Home.Module.PHP'脚本对用户提交的'repmod'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 phpFullAnnu phpFullAnnu 5.1 http://pfa.netsliver.com/fr/actus.html http://www.example.com/Script...

Microsoft Windows Manifest File Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...

security flaw

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read...