Insufficient boundary check in ImageMagick's SGIDecode()

Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image...

security flaw

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysqlrealescape function is...

CVE-2006-1062

Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown vectors...

Einstein <= 1.01 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ================================================== Einstein include HKEY hKey; define BUFSIZE 100 char usernameBUFSIZE, passwordBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int mainvoid ifRegOpenKeyExHKEYLOCALMACHINE,"Software\einstein", 0,...

my.phpforum.1.0.txt

/==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit member.php?action=viewpro&member=nonexist' UNION...

[SA12467] Tutti Nova Unspecified Vulnerabilities

TITLE: Tutti Nova Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA12467 VERIFY ADVISORY: http://secunia.com/advisories/12467/ CRITICAL: Highly critical IMPACT: Unknown WHERE: From remote SOFTWARE: Tutti Nova 0.x http://secunia.com/product/3868/ DESCRIPTION: Various unspecified vulnerabilities...

[Full-Disclosure] XSS in Board Power forum

Programm: Board Power forum v2.04 PF Autor: Ivan Zhdanov CRITICAL: Low Exploit: http://target/cgi-bin/boardpower/icq.cgi?action=scriptjavascript:alert 'hello';/script URL: http://www.thewebmasterforums.com ...... Maxpatrol - Professional Network Security Scanner www.maxpatrol.com. Full-Disclosure...

OpenBB < 1.0.6 - Multiple Vulnerabilities

OpenBB Multiple Vulnerabilities Vendor: OpenBB Group Product: OpenBB Version: getrow; $ftype = $querytype-field'type'; As we can see from this code, the $FID variable seems to get pas...

PT-2003-1602 · Sun · Sun One Application Server

Name of the Vulnerable Software and Affected Versions: Sun ONE Application Server version 7.0 Description: The issue allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension. Recommendations: For Sun ONE...

Apache 2.0.45 - APR Crash

Apache 2.0.45 - APR Crash !/usr/bin/perl Apache 2.0.37 - 2.0.45 APR Exploit Written By Matthew Murphy This Perl script will successfully exploit any un-patched Apache 2.x servers. Base64 Encoder If you want authentication with the server via HTTP's lame Basic auth, put the proper string to encode...

PT-2002-2461 · Alt N Technologies · Mdaemon

Name of the Vulnerable Software and Affected Versions: Alt-N Technologies Mdaemon versions 5.0 through 5.0.6 Description: The issue concerns the use of a weak encryption algorithm to store user passwords, allowing local users to crack passwords. Recommendations: For versions 5.0 through 5.0.6,...

PT-2001-2544 · Microsoft · Windows 2000 Server +1

Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 2000 Server Description: The issue allows remote attackers to poison the DNS cache via spoofed DNS responses because DNS servers cache glue records received from non-delegated name servers by default. Recommendations: F...

CVE-2000-0402

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...

Apple WebObjects Developer NT4 IIS4.0 CGI-adapter 4.5 - Developer Remote Overflow

source: https://www.securityfocus.com/bid/1896/info A denial-of-service vulnerability exists in Apple's WebObjects 4.5 Developer, a popular platform for developing web-based applications. The vulnerable version is Windows NT 4.0 SP5, when run in conjunction with the CGI-adapter and IIS 4.0. An HT...

PT-1999-1409 · Slackware · Slackware

Name of the Vulnerable Software and Affected Versions: Slackware version 7.0 Description: The issue allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. Recommendations: For Slackware version 7.0, update to a...

CA-99-13: minimal fix for Slackware 3.5 through 4.0

...

Microsoft .NET Framework 2.0: x86 (KB829019)

Microsoft .NET Framework 2.0: x86 KB829019...

Microsoft .NET Framework 3.0 Service Pack 1 (KB929300) x64 Language Pack

Microsoft .NET Framework 3.0 Service Pack 1 KB929300 x64 Language Pack...

2019-10 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4520409)

2019-10 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4520409...

2018-09 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 for x64 (KB4458614)

2018-09 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 for x64 KB4458614...