KLA10228 ACE vulnerability in WhatsUp Professional

An SQL injection vulnerability was found in WhatsUp Professional. By exploiting this vulnerability malicious users can execute arbitrary SQL commands. This vulnerability can be exploited remotely at points related to the logon screen. Original advisories - Related products...

Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL...

CVE-2002-1670

CVE-2002-1670 concerns Microsoft Windows XP Professional upgrade edition where applying an upgrade overwrites already installed Internet Explorer 6.0 patches, resulting in Internet Explorer being left unpatched. The connected sources reiterate this description without adding concrete exploit deta...

mast.txt

Hi list, Just found an implementation bug in MAST RunAsP.exe v3.5.1 and below, that allows local privilege escalation. Vendor: MAST-Computer Homepage of product : http://www.mast-computer.com/c9-s7-len.html Description of product: For Windows 2000, Windows XP RunAs Professional is a substitute fo...

CVE-2005-1412

CVE-2005-1412 affects Ecomm Professional Guestbook 3.x. The vulnerability is a SQL injection in verify.asp that allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter. The Red Hat/ vendor CVE references corroborate the description. The documents do not provide explic...

CVE-2005-1412

SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter...

CVE-2005-1412

SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter...

CVE-2005-0185

Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field...

CVE-2005-1348

CVE-2005-1348 corresponds to a buffer overflow in MailEnable’s HTTPMail service. Concrete details: affected products are MailEnable Enterprise (versions 1.04 and earlier) and MailEnable Professional (versions 1.54 and earlier). The overflow occurs via a long HTTP Authorization header, allowing a ...

PT-2005-2350 · Mailenable · Mailenable Professional +1

Name of the Vulnerable Software and Affected Versions: MailEnable Enterprise versions 1.04 and earlier MailEnable Professional versions 1.54 and earlier Description: A buffer overflow issue in the HTTPMail component allows remote attackers to execute arbitrary code by sending a long HTTP...

MailEnable Enterprise & Professional https Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================= MailEnable Enterprise & Professional https Remote BoF Exploit ============================================================= !/usr/bin/perl This tools and to consider only himself...

MailEnable Enterprise & Professional - https Remote Buffer Overflow

!/usr/bin/perl This tools and to consider only himself to educational purpose -=MailEnable Enterprise & Professional HTTPS remote BoF exploit=- -= =- -= Discovered & Coded by CorryL info:www.x0n3-h4ck.org=- -= irc.xoned.net x0n3-h4ck corryl80atgmail.com=- +Connecting to 127.0.0.1 +Sending Evil...

[SA15038] netMailshar Professional Two Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: netMailshar Professional Two Vulnerabilities SECUNIA...

MailEnable Enterprise 1.x SMTP Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================================== MailEnable Enterprise 1.x SMTP Remote Denial of Service Exploit =============================================================== !/usr/bin/perl MailEnable Enterprise = 1.04-Profession...

GoodTech Telnet Server < 5.0.7 Buffer Overflow Crash Exploit

Exploit for unknown platform in category dos / poc ============================================================ GoodTech Telnet Server include include int mainint argc, char argv SOCKET sock; struct sockaddrin sockaddr; WSADATA data; WORD p; p=MAKEWORD2,0; WSAStartupp,&data; int i, n, err; unsign...

CVE-2004-1661

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...

CVE-2004-1661

MailWorks Professional is affected by CVE-2004-1661, where remote attackers can bypass authentication and gain privileges using a cookie containing auth=1 and uId=1. The issue enables partial confidentiality and integrity/availability impact per the NVD CVSS2 metrics (AV:N, AC:L, Au:N, C:P, I:P, ...

CVE-2005-0185

CVE-2005-0185 describes a stack-based buffer overflow in NodeManager Professional 2.00 . The overflow occurs via a LinkDown-Trap packet containing a long OCTET-STRING in the Trap variable-bindings field, enabling an unauthenticated remote attacker to potentially execute arbitrary commands. The pr...

CVE-2005-0185

Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field...

[SIG^2 G-TEC] NodeManager Professional V2.00 Buffer Overflow Vulnerability

SIG^2 Vulnerability Research Advisory NodeManager Professional V2.00 Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 17 Jan 2005 ADVISORY URL http://www.security.org.sg/vuln/nodemanager200.html SUMMARY NodeManager Professional http://www.h4.dion.ne.jp/you4707/NodeManagerPro.html is ...