285 matches found
CVE-2006-3765
Multiple cross-site scripting XSS vulnerabilities in Huttenlocher Webdesign hwdeGUEST 2.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the "name input" field in newentry.php...
blogspot.txt
Blogspot.com Homepage: http://www.blogspot.com Affected files: Blog input boxes ------------------------------------------ XSS vuln via Display name input box. Blogger doesnt properally sanatize user input before generating it. For example, you can't use illegal characters in your username,or...
BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun
BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun // source: https://www.securityfocus.com/bid/10165/info bsd-games mille is prone to a locally exploitable buffer overrun vulnerability. This issue is due to insufficient bounds checking when the user inputs a file name when saving a...
BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun
// source: https://www.securityfocus.com/bid/10165/info bsd-games mille is prone to a locally exploitable buffer overrun vulnerability. This issue is due to insufficient bounds checking when the user inputs a file name when saving a game. This game is typically installed setgid games so may allow...
suid scotty / ntping overflow
here is the offending code and the attached letter has the general information for this issue. in /home/d0tslash/scotty-2.1.0/tnm/ntping/ntping.c char hname; / hostname / ... else char tmp 512; struct hostent hp; strcpy tmp, hname; ifdef HAVERES / try to spend no longer than some seconds: /...