CVE-2006-0843: Undefined Security Weakness

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password...

CVE-2006-0845: Undefined Security Weakness

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname...

CVE-2006-0844: Undefined Security Weakness

Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie...

[SA18923] Leif M. Wright's Blog Multiple Vulnerabilities

TITLE: Leif M. Wright's Blog Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18923 VERIFY ADVISORY: http://secunia.com/advisories/18923/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Leif M...

CVE-2006-0738

Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service hang via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using 1 the field name, 2 the o field owner/creator and session identifier,...

EV0080.txt

New eVuln Advisory: M. Blom HTML::BBCode perl module XSS Vulnerabilities http://evuln.com/vulns/80/summary.html --------------------Summary---------------- eVuln ID: EV0080 Software: M. Blom HTML::BBCode Sowtware's Web Site: http://menno.b10m.net/perl/ Versions: 1.04 1.03 and earlier Critical...

CVE-2006-0735

Cross-site scripting XSS vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an 1 img or 2 url BBcode tag...

[SA18818] Isode M-Vault Server LDAP Vulnerability

TITLE: Isode M-Vault Server LDAP Vulnerability SECUNIA ADVISORY ID: SA18818 VERIFY ADVISORY: http://secunia.com/advisories/18818/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Isode M-Vault 11.x http://secunia.com/product/8065/ DESCRIPTION: Evgeny...

[eVuln] M. Blom HTML::BBCode perl module XSS Vulnerabilities

New eVuln Advisory: M. Blom HTML::BBCode perl module XSS Vulnerabilities http://evuln.com/vulns/80/summary.html --------------------Summary---------------- eVuln ID: EV0080 Software: M. Blom HTML::BBCode Sowtware's Web Site: http://menno.b10m.net/perl/ Versions: 1.04 1.03 and earlier Critical...

CVE-2006-0710

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP...

Double free

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP...

CVE-2006-0710

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP...

CVE-2006-0710

CVE-2006-0710 describes a double-free vulnerability in isode.eddy within Isode M-Vault Server 11.3. The vulnerability occurs in LDAP request handling, enabling remote code execution as demonstrated by a ProtoVer Sample LDAP payload. The affected component is Isode M-Vault Server 11.3; the root ca...

CVE-2006-0710: Improper Restriction of Operations within the Bounds of a Memory Buffer

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP...

Isode M-Vault Server 11.3 - LDAP Memory Corruption

source: https://www.securityfocus.com/bid/16635/info Isode M-Vault Server is prone to a memory corruption. This issue may be triggered by malformed LDAP data. The exact impact of this vulnerability is not known at this time. Although the issue is known to crash the server, the possibility of remo...

Isode M-Vault Server 11.3 - LDAP Memory Corruption

Isode M-Vault Server 11.3 - LDAP Memory Corruption source: https://www.securityfocus.com/bid/16635/info Isode M-Vault Server is prone to a memory corruption. This issue may be triggered by malformed LDAP data. The exact impact of this vulnerability is not known at this time. Although the issue is...

[SA18521] AOL You've Got Pictures ActiveX Control Buffer Overflow

TITLE: AOL You've Got Pictures ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA18521 VERIFY ADVISORY: http://secunia.com/advisories/18521/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: AOL 8.x http://secunia.com/product/6839/ AOL 9.x Classic...

PT-2005-5482 · Unknown · Land Down Under

Name of the Vulnerable Software and Affected Versions: Land Down Under LDU versions v801 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via parameters including 1 the m parameter in "auth.php", 2 the f parameter in "events.php", ...

CVE-2005-4008: Undefined Security Weakness

SQL injection vulnerability in jaxcalendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the 1 calid parameter, and possibly the 2 Y and 3 m parameters...

CVE-2005-3933: Undefined Security Weakness

SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...