1162 matches found
CVE-2005-4471: Undefined Security Weakness
POP3 service in Avaya Modular Messaging Message Storage Server MSS 2.0 SP 4 and earlier allows remote attackers to cause a denial of service infinite loop via crafted packets...
[SA18204] Avaya Modular Messaging POP3 Denial of Service Vulnerability
TITLE: Avaya Modular Messaging POP3 Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18204 VERIFY ADVISORY: http://secunia.com/advisories/18204/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Avaya Modular Messaging 2.x http://secunia.com/product/4484/...
Plexcor's(r) CMS XSS vuln.
Plexcor's® CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcors-cms-xss-vuln.html vendor:http://www.plexcor.com/ affected version: 4.0 and prior Product Description: Integrated modular content, communications, calendar, commerce,...
nodez.txt
Description: Nodez is a young, but strong, open source Content Manager. Nodez is designed to be as modular, stable and lightweight as possible version: Version 4.6.1.1 vendor: http://nodez.greentinted.com Vulnerability: cross site script sploit...
Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information disclosure vulnerability when using an authenticating proxy server for HTTPS communications. Exploitation of this issue could result in an attacker gaining a user's authentication credentials. This issue only exists when the...
CVE-2005-4176
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...
CVE-2005-4176
CVE-2005-4176 affects AWARD BIOS Modular 4.50pg and is caused by failure to clear the keyboard buffer after BIOS password reads, enabling local users to read the password from physical memory. The vulnerability is local in scope with low base score (2.1); details on exploit code or practical in‑t...
CVE-2005-4176
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...
CVE-2005-4176: Undefined Security Weakness
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)
Multiple Vendor BIOS - Keyboard Buffer Password Persistence 2 // source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)
// source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memor...
Panda Remote Heap Overflow
Date November 29, 2005 Vulnerability The Panda Antivirus Library provides file format support for virus analysis. During decompression of ZOO files Panda is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remote...
linux/x86 ifreadfd,buf,512<=2 _exit1 else buf; 29 bytes
linux/x86 ifreadfd,buf,512 I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than necessary because of the error checking but in some cases...
linux/x86 _exit(1); 7 bytes
Exploit for linux/x86 platform in category shellcode =========================== linux/x86 exit1; 7 bytes =========================== / exit-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I use it when I need a process to exit cleanly. / char...
linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes
linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes. Shellcode exploit for linx86 platform / dup2loop-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I usually combine this with an execve as the second stage of a read jmp %esp / char hellcode = /...
linux/x86 _exit1; 7 bytes
linux/x86 exit1; 7 bytes. Shellcode exploit for linx86 platform / exit-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I use it when I need a process to exit cleanly. / char hellcode = / exit1; linux/x86 by core / // 7 bytes exit1 ... 'cause...
linux/x86 dup2(0,0); dup2(0,1); dup2(0,2); 15 bytes
Exploit for linux/x86 platform in category shellcode =================================================== linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes =================================================== / dup2loop-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular...
Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability
Description Microsoft Windows WMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF formatted file, triggering the vulnerability when the engine attempts to parse the file. A malicious file can cause an...
M4DR007-07SA (security advisory): Multiple vulnerabilities in ASP Nuke 0.80
M4DR007-07SA security advisory: Multiple vulnerabilities in ASP Nuke 0.80 Published: 26 16 2005 Released: 26 16 2005 Name: ASP Nuke Affected Systems: = 0.80 Issue: Cross-Site Scripting, HTTP Response Splitting, SQL Injection Author: Alberto Trivero Vendor: http://www.aspnuke.com/ Software...
Fedora Core 3 : kernel-2.6.11-1.27_FC3 (2005-392)
Tue May 17 2005 Dave Jones - Remove the unused and outdated Xen patches from the FC3 tree. - Mon May 16 2005 Dave Jones - Rebase to 2.6.11.10, fixing CVE-2005-1264 - Thu May 12 2005 Dave Jones - Rebase to 2.6.11.9, fixing CVE-2005-1263 - Tue May 10 2005 Dave Jones - Fix two bugs in x86-64 page...