Code injection

Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to 1 ALSANITIZE and 2 "Calling the constructor to make sure things are checked, safe mode, etc."...

CVE-2007-4147

Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to 1 ALSANITIZE and 2 "Calling the constructor to make sure things are checked, safe mode, etc."...

CVE-2007-4147

Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to 1 ALSANITIZE and 2 "Calling the constructor to make sure things are checked, safe mode, etc."...

CVE-2007-4147

Interspire ArticleLive NX prior to 1.7.1.2 is affected by multiple unspecified vulnerabilities with unknown impact and attack vectors. The connected sources mention potential issues related to AL_SANITIZE and a constructor-related check mechanism, but no concrete exploit details, affected file/en...

CVE-2007-4147: Undefined Security Weakness

Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to 1 ALSANITIZE and 2 "Calling the constructor to make sure things are checked, safe mode, etc."...

PT-2007-3539 · N/X +3 · Web Content Management News System +4

Name of the Vulnerable Software and Affected Versions: PclTar module versions 1.3 and 1.3.1 Joomla! version 1.5.0 Beta N/X Web Content Management System WCMS version 4.5 CJG EXPLORER PRO version 3.3 phpSiteBackup version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP...

MS07-029 Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)

This module exploits a stack buffer overflow in the RPC interface of the Microsoft DNS service. The vulnerability is triggered when a long zone name parameter is supplied that contains escaped octal strings. This module is capable of bypassing NX/DEP protection on Windows 2003 SP1/SP2. This modul...

MS07-029 Microsoft DNS RPC Service extractQuotedChar() Overflow (TCP)

This module exploits a stack buffer overflow in the RPC interface of the Microsoft DNS service. The vulnerability is triggered when a long zone name parameter is supplied that contains escaped octal strings. This module is capable of bypassing NX/DEP protection on Windows 2003 SP1/SP2. Module...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:197)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Bugs in the netfilter for IPv6 code, as reported by Mark Dowd, were fixed CVE-2006-4572. The ATM subsystem of the Linux kernel could allow a remote attacker to cause a Denial of Service panic via unknown vectors that cau...

Denial of service

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service...

CVE-2007-0625

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service...

CVE-2007-0625

NoMachine NX Server (prior to version 2.1.0-18) is affected by CVE-2007-0625. The vulnerability lies in nxconfigure.sh, which does not validate the invoking user, allowing local users to modify server configuration keys in /usr/NX/etc/server.cfg. This can lead to an unspecified denial of service....

CVE-2007-0625

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service...

CVE-2007-0625: Undefined Security Weakness

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service...

interspireXSS.txt

I.Vulnerability Interspire TrackPoint NX Cross Site Scripting Vulnerability II.Vendor Interspire www.interspire.com III.Affected Systems - Interspire TrackPoint NX 0.1 IV.About TrackPoint is a web based sales tracking software. V.Description An attacker is able to inject HTML and client-side scri...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page...

CVE-2006-0210

Cross-site scripting XSS vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page...

CVE-2006-0210

CVE-2006-0210 is a Cross-site Scripting (XSS) vulnerability in Interspire TrackPoint NX prior to 0.1. The issue occurs in index.php and allows remote attackers to inject arbitrary web script or HTML via the username parameter on the Login page. This is the concrete vulnerability described in the ...

CVE-2006-0210: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page...

Interspire TrackPoint NX XSS Vulnerability

I.Vulnerability Interspire TrackPoint NX Cross Site Scripting Vulnerability II.Vendor Interspire www.interspire.com III.Affected Systems - Interspire TrackPoint NX 0.1 IV.About TrackPoint is a web based sales tracking software. V.Description An attacker is able to inject HTML and client-side scri...