3744 matches found
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
No description provided by source. nnp at silenthack.co.uk http://silenthack.co.uk Kmail = 1.9.1 latest suffers from a crash when trying to parse an incorrectly formatted img tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick...
US-CERT Technical Cyber Security Alert TA06-270A -- Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-270A Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability Original release date: September 27, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows...
Microsoft Internet Explorer VML stack buffer overflow
Overview Microsoft Internet Explorer IE fails to properly handle Vector Markup Language tags. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft IE version 5.0 and higher supports the Vector Markup Language VML,...
PHPMyRing 4.2.0 - 'view_com.php' SQL Injection
Title: PHPMyRing's viewcom.php Remote SQL injection Exploit Vendor: phpmyring webiste : http://phpmyring.sourceforge.net/ Version : Exploit writting by: Simo Ben youssef Discovered: 09 Aout 2006 Published : 10 Aout 2006 MorX Security Research Team http://www.morx.org Details: vulnerable code on...
Microsoft Windows kernel fails to properly manage exception handling
Overview An exception handling vulnerability in the Microsoft Windows kernel may allow a remote attacker to execute arbitrary code. Description Microsoft Windows kernel contains an exception handling vulnerability that can allow a remote attacker to execute arbitrary code with privileges of the...
finjanPass.txt
Plain text password in backup file Finjan Appliance 5100/8100 NG The Version 8.3.5 is affected. In the new console function backup and restore the passwords are saved as plain text. The Finjan Appliance uses a Firebird database. The backup saves the database as text file. Samba and FTP passwords...
[Full-disclosure] [SECURITY] Plain text password in Finjan Appliance 5100/8100 NG backup file
Plain text password in backup file Finjan Appliance 5100/8100 NG The Version 8.3.5 is affected. In the new console function backup and restore the passwords are saved as plain text. The Finjan Appliance uses a Firebird database. The backup saves the database as text file. Samba and FTP passwords...
MD5 decrypt of the most fast method-vulnerability warning-the black bar safety net
In General, shaped like a 1e4dc79d489e86b2 the 1 6-bit or 3 2-bit password is the MD5 encrypted, of course, there are also special, such as the DVBBS on the landing when will first produce a 1 6-bit random password,of course, the password or the MD5 password in the form of a little difference, th...
Mathcad Area Lock Vulnerability
Description of Vulnerability ============================ One of the features of Mathcad www.mathsoft.com is allowing the user to define ‘Areas’. Mathsoft say that ‘You can use areas to protect, lock, or hide information or equations in your worksheets’ and that ‘You can also protect the contents...
WebGUI < 6.7.6 arbitrary command execution
The remote web server contains a CGI script that is prone to arbitrary code execution. Description : The remote host is running WebGUI, a content management system from Plain Black Software. The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the OpenVAS...
Ubuntu 5.10 Installer - Password Disclosure
!/usr/bin/perl -w use warnings; use strict; Author: Kristian Hermansen Date: 3/12/2006 Overview: Ubuntu Breezy stores the installation password in plain text Link: https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606 print "\n"; print "Kristian Hermansen's 'Eazy Breezy' Password Recover...
Ubuntu 5.10 Installer - Password Disclosure
Ubuntu 5.10 Installer - Password Disclosure !/usr/bin/perl -w use warnings; use strict; Author: Kristian Hermansen Date: 3/12/2006 Overview: Ubuntu Breezy stores the installation password in plain text Link: https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606 print "\n"; print "Kristia...
Ubuntu Breezy 5.10 Installer Password Disclosure Vulnerability
Exploit for linux platform in category local exploits ============================================================== Ubuntu Breezy 5.10 Installer Password Disclosure Vulnerability ============================================================== !/usr/bin/perl -w use warnings; use strict; Author:...
Evolution mail agent DoS
Large plain text message with large number of URL causes application to hang...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserNam...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
No description provided by source. !/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook = 5.5 And possible higher could not find a site to test it on This exploit shows the username of the administrator and the password In plain text Bug Found by muderskillz Coded by Zodiac Shouts to...
ASPThai.Net Guestbook 5.5 - Authentication Bypass
ASPThai.Net Guestbook 5.5 - Authentication Bypass !/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserName' = '' or...
CVE-2005-4694
Unspecified vulnerability in the wwwadd method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 gamma allows remote attackers to inject arbitrary Javascript via the 1 url and 2 name field of the default email form...
CVE-2006-0165
Cross-site scripting XSS vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 gamma allows remote attackers to inject arbitrary Javascript via the 1 url and 2 name field of the default email form...