9426 matches found
CVE-2004-2460
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...
CVE-2004-1780
Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...
CVE-2004-1810
The Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service crash by creating a new Array object with a large size value, then writing into that array...
CVE-2004-2608
SmartWebby Smart Guest Book stores SmartGuestBook.mdb aka the "news database" under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the unencrypted username and password of the administrator's account...
CVE-2004-1377
The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-0810
Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service server process crash via a certain data string that is sent to multiple simultaneous client connections to TCP port 407...
CVE-2004-1275
Buffer overflow in the removequote function in convert.c for html2hdml 1.0.3 allows remote attackers to execute arbitrary code via a crafted HTML file...
CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system...
CGI bugs
No description provided...
phpbb2011.txt
Phpbb: All vulnerable all except 2.0.11 Attachment module: All version vulnerable Howdark update opened wide my eyes with his nice exploit: Bugtraq id: 10701 ----- viewtopic.php?t=1&highlight=%2527 ----- Looking at the code I saw that was possible inject any type of Sql query with a multiple char...
CVE-2004-1064
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute...
zgv 5.5 - Multiple Arbitrary Code Executions
Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/609.tar.gz ximagezgv.tar.gz milw0rm.com 2004-10-28...
Solaris 8 (sparc) : 116973-07
SunOS 5.8: Apache Patch. Date this patch was last updated by Sun : Apr/24/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Debian DSA-058-1 : exim - local printf format attack
Megyer Laszlo found a printf format bug in the exim mail transfer agent. The code that checks the header syntax of an email logs an error without protecting itself against printf format attacks. It's only exploitable locally with the -bS switch in batched SMTP mode. %NASLMINLEVEL 70300 C Tenable...
CVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir...
RKDetect - behaviour based rootkit detection utility
Rkdetect is a little anomaly detection tool which can find services hidden by generic Windows rootkits like Hacker Defender. Tool very simply. It enumerates services on remote computer through WMI user level and Services Control Manager kernel level, compare result and display difference. In this...
identd Service UID Association
By using the identd server RFC 1413, it is possible to determine the process owner of the remote service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid14674; scriptversion"1.21";...
CVE-2002-1529
Cross-site scripting XSS vulnerability in msgError.asp for the administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter...