4226 matches found
OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== OpenDock Easy Doc =1.4 docdirectory File Include Vulnerabilities ==================================================================== ECHOADV49$2006...
OpenDock Easy Blog <=1.4 (doc_directory) File Include Vulnerabilities
No description provided by source. ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Blog 1.4 - 'doc_directory' File Inclusion
ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== WebYep = 1.1.9 webyepsIncludePath File Include Vulnerabilities ================================================================== ECHOADV48$2006...
win32 WinExec Command Parameter 104+ bytes
win32 WinExec Command Parameter 104+ bytes. Shellcode exploit for win32 platform ; ; relocateable dynamic runtime assembly code example using hash lookup ; ; WinExec with ExitThread ; 104 bytes ; ; for testing: ; ; ml /c /coff /Cp wexec2.asm ; link /subsystem:windows /section:.text,w wexec2.obj ;...
[Full-disclosure] Ultimate Auction <=3.67
Hello! I've found a XSS in Ultimate Auction =3.67. The Vendor was informed mid October 2005! They still haven't fix the script and doesn't reply to mails. Here's a little Example: http://www.ultimate-auction.de/cgi-local/auktion/item.pl/item.pl?item=scriptalert"XSS"/script...
gmailbug.txt
Gmail Bug - INTRODUCTION This bug has already been corrected, that's why it's been published. In this manual you will see step by step how to exploit Gmail's vulnerability, that gave you access to any account, reported by Anelkaos, colaborator of elhacker.net's forum and patched by Google by...
Oracle DBMS_ASSERT and the October 2005 CPU
Whilst there are problems with the Oracle October 2005 Critical Patch Update, it's not all bad news.... There is a great deal of evidence in this patch that Oracle are beginning to treat security properly. They've introduced a new package PL/SQL package DBMSASSERT into the RDBMS. Whilst DBMSASSER...
Oracle October 2005 CPU Problems
Examining the Oracle October 2005 Critical Patch Update in depth, NGSResearchers discovered a number of problems which have all since been reported to Oracle. As well as new vulnerabilities and problems with the patches for old vulnerabilities, the October 2005 CPU fails to install the patched...
[Full-disclosure] Exploit Oracle DB27 - CPU Octobre
Exploit Oracle DB27 SQL exec sys.pbsde.init'AA',TRUE,'MARYANNDAVIDSONMARYANNDAVIDSONMARYA NNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMA RYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSO NMARYANNDAVIDSONMARYANNDAVIDSON',NULL; BEGIN...
[Full-disclosure] Oracle Workflow CSS Vulnerability wf_monitor
Dear FD-Reader, The Oracle Critical Patch Update October 2005 provides fixes for 2 Cross-Site- Scripting vulnerabilities in Oracle Workflow found by Red-Database-Security GmbH. I know that the severity and impact of CSS bugs is low. My critical security bugs in Oracle e.g. become DBA via the impo...
HP-UX PHSS_16649 : s700_800 11.00 Receiver Services October 1998 Patch
s700800 11.00 Receiver Services October 1998 Patch : The SharedX program recserv is vulnerable to a denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS16649. The text itself is...
Solaris 7 (sparc) : 108748-02
SunOS 5.7: /usr/lib/nfs/statd patch. Date this patch was last updated by Sun : Oct/03/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 9 (sparc) : 113273-16
SunOS 5.9: /usr/lib/ssh/sshd patch. Date this patch was last updated by Sun : Oct/19/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Multiple Vulnerabilities in Led-Forums
Product: Led-Forums Versions: Beta 1 Vulnerability: XSS- and redirection-Bug Date: October 30, 2003 Discovered by: ProXy [email protected] 1. - XSS-Bug The Welcome-Message of the Led-Forums software could be changed by everybody. Normal Text, HTML and Javascript it's all allowed! : eg:...
Security Bulletin #00210
Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00210 Date: October 23, 2001 Cross-Ref: CERT Vulnerability Note VU36866 Title: ufsrestore The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to the informati...
redhat.lpr.txt
details of an exploit agains lpr-0.50-4 at least also affects other systems that may have the same print filters URL : http://crash.ihug.co.nz/Sneuro/lpd-adv.txt AFFECTS : lpr-0.50-4 & earlier SEVERITY : local ROOT possible. SYNOPSIS : escalation of group permissions, leading to exploit for every...
Microsoft Security Bulletin (MS00-078)
Microsoft Security Bulletin MS00-078 - -------------------------------------- Patch Available for "Web Server Folder Traversal" Vulnerability Originally posted: October 17, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr IIS 4.0 and 5.0...
[SECURITY] New versions of Boa packages available
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 9, 2000 - ---------------------------------------------------------------------------- Package: boa Vulnerability:...
msie4.width.000.txt
Jim Paris http://home.jtan.com/jim/bugs/ie/width.html Internet Explorer 4.x "width=000..." bug Some versions of Microsoft Internet Explorer will crash when given a long "width=" or "height=" string in an image tag under the correct circumstances. In most cases, IE will stop parsing the "width="...