Echo Security Advisory 2005.21

--------------------------------------------------------------------------- ECHOADV21$2005 MUltiple Vulnarable In ActiveBuyAndSell --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 24th 2005 Location: Indonesia, Jakarta Web:...

MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)

Exploit for unknown platform in category remote exploits ========================================================== MS Outlook Express NNTP Buffer Overflow Exploit MS05-030 ========================================================== include include include include pragma commentlib,"ws232" /...

phpBB <= 2.0.15 Register Multiple Users Denial of Service (c code)

No description provided by source. / -------------------------------------------------------- Neo Security Team NST® - Advisory 15 - 00/00/06 -------------------------------------------------------- Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.15 & Lower...

phpBB <= 2.0.15 Register Multiple Users Denial of Service (c code)

Exploit for unknown platform in category web applications ================================================================== phpBB = 2.0.15 Register Multiple Users Denial of Service c code ================================================================== /...

CVE-2005-1729

Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service application crash via a URL containing an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1...

php2014.txt

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 14 - 17/04/05 -------------------------------------------------------- Program: phpBB 2.0.14 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.14 & Lower versions Risk: Low Risk!! Impact:...

UNICODE BUFFER OVERFLOW IN MS-WORD

UNICODE BUFFER OVERFLOW IN MS-WORD =================================== .mcw is the ms-word format file for Macintosh. the unicode buffer overflow occurs when the user opens the malformed .mcw document. Proof of concept: ----------------- by modifying the .mcw file by using binary editor as follow...

CVE-2003-1205

Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service crash by renaming a file to the "con" MS-DOS device name...

Multiple Vulnerabilities in MetaCart e-Shop

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV13$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in MetaCart e-Shop --------------------------------------------------------------------------- Author: Dedi Dwianto Date: May, 16t...

CVE-2004-1840

Multiple cross-site scripting XSS vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the 1 screen parameter to modules.php, 2 modulename parameter to title.php, 3 sortby parameter to modules.php, or 4 overview parameter to...

CVE-2004-1840

CVE-2004-1840 affects the MS Analysis module 2.0 for PHP-Nuke. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary JavaScript/HTML via (1) screen parameter to modules.php, (2) module_name parameter to title.php, (3) sortby parameter to mo...

CVE-2004-1841

SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request...

CVE-2004-1841

CVE-2004-1841 concerns a SQL injection in MS Analysis module 2.0 for PHP-Nuke, allowing remote attackers to execute arbitrary SQL via the Referer header in an HTTP request. The available documents identify the affected component and the general vulnerability class but do not provide version-speci...

CVE-2004-1839

MS Analysis module 2.0 for PHP-Nuke exposes full path disclosure via direct requests to browsers.php, mstrack.php, or title.php, enabling Information Disclosure without user interaction. Root cause: PHP error messages reveal filesystem paths. The provided documents do not specify a patched versio...

CVE-2005-0275

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...

CVE-2005-0278

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

Immunity Canvas: MS05_021

Name| ms05021 ---|--- CVE| CVE-2005-0560 Exploit Pack| CANVAS Description| MS Exchange 2000 MS05-021 X-LINK2STATE heap overflow Notes| CVE Name: CVE-2005-0560 VENDOR: Microsoft MSADV: MS05-021 CVSS: 7.5 CVE Url: https://vulners.com/cve/CVE-2005-0560 Notes: This exploit is reliable over and over...

MS Windows WINS Vulnerability and OS/SP Scanner

Exploit for unknown platform in category remote exploits =============================================== MS Windows WINS Vulnerability and OS/SP Scanner =============================================== / HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------...

MS Exchange Server Remote Code Execution Exploit (MS05-021)

Exploit for unknown platform in category remote exploits =========================================================== MS Exchange Server Remote Code Execution Exploit MS05-021 =========================================================== !/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author...

MS Internet Explorer DHTML Object Memory Corruption Exploit

Exploit for unknown platform in category remote exploits =========================================================== MS Internet Explorer DHTML Object Memory Corruption Exploit =========================================================== This program is free software; you can redistribute it and/o...