CVE-2009-4176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter to ovlogin.exe...

CVE-2009-3846: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter...

Misconfigured /etc/passwd file may share folders unexpectedly

Description If a user in /etc/passwd is misconfigured to have an empty home directory :: and the automated homes share is enabled, or an explicit share is created with that username, then any client connecting to that share name will be able to access the whole filesystem from root / on downwards...

Gentoo Security Advisory GLSA 200909-14 (horde horde-imp horde-passwd)

The remote host is missing updates announced in advisory GLSA 200909-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-14 (horde horde-imp horde-passwd)

The remote host is missing updates announced in advisory GLSA 200909-14. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

PunBB Reputation.php Mod 2.0.4 - Local File Inclusion

PunBB Reputation.php Mod 2.0.4 - Local File Inclusion !/usr/bin/perl 0-Day PunBB Reputation.php Mod 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub LocalFileInclusion my $Directory,$Command = @; return "./include/reputation/repprofile.php?punuserlanguage=$Directory$Command%00...

Debian Security Advisory DSA 1829-2 (sork-passwd-h3)

The remote host is missing an update to sork-passwd-h3 announced via advisory DSA 1829-2. OpenVAS Vulnerability Test $Id: deb18292.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1829-2 sork-passwd-h3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Debian: Security Advisory (DSA-1829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1829-2] New sork-passwd-h3 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1829-2 [email protected] http://www.debian.org/security/ Steffen Joeris July 14, 2009 http://www.debian.org/security/faq -...

DJ Calendar (DJcalendar.cgi TEMPLATE) File Disclosure Vuln

Exploit for cgi platform in category web applications ========================================================== DJ Calendar DJcalendar.cgi TEMPLATE File Disclosure Vuln ========================================================== Discovered by cibbao PoC:...

DJ Calendar - 'DJcalendar.cgi TEMPLATE' File Disclosure

Discovered by cibbao PoC: /cgi-bin/DJcalendar.cgi?TEMPLATE=/../../../../../../../etc/passwd milw0rm.com 2009-07-14...

[SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1829-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1829-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 11, 2009 http://www.debian.org/security/faq -...

Horde Passwd模块backend参数跨站脚本漏洞

BUGTRAQ ID: 35573 Horde Framework是个以PHP为基础的架构，用来创建网络应用程序；Passwd是其中用于更改口令的模块。 Horde Passwd模块的passwd/main.php文件没有正确的过滤用户所提交的backend参数，远程攻击者可以通过向该模块提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 Horde Passwd 3.1 厂商补丁： Horde ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-2360

Cross-site scripting XSS vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter...

CVE-2009-2360

Cross-site scripting XSS vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter...

CVE-2009-2360

Cross-site scripting XSS vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter...

CVE-2009-2360

CVE-2009-2360 is an XSS vulnerability in Horde Passwd (passwd/main.php) where the backend parameter is not properly sanitized in Horde before version 3.1.1. The flaw could allow remote attackers to inject web script/HTML. Documents indicate this issue is part of a set of Horde vulnerabilities (GL...