Hummingbird FTP client weak encryption

Profiles are "encrypted" by XOR'ing with fixed byte value 0x7d...

Hummingbird FTP Weak Password Encryption

Hummingbird FTP Weak Password Encryption Critical: Less critical Impact: Exposure of sensitive information Where: Local system Solution Status: Unpatched Software: Hummingbird Connectivity 10.x http://connectivity.hummingbird.com/products/nc/cpia.html Description: A vulnerability has been...

Internet Explorer / MSN ICC Profiles Crash PoC Exploit

/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...

Microsoft Internet Explorer MSN - ICC Profiles Crash (PoC)

Microsoft Internet Explorer MSN - ICC Profiles Crash PoC /-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in...

MS Internet Explorer / MSN ICC Profiles Crash PoC Exploit

Exploit for unknown platform in category dos / poc ========================================================= MS Internet Explorer / MSN ICC Profiles Crash PoC Exploit ========================================================= /-----------------------------edwardgagnon--------------/ Can crash msn...

Microsoft Internet Explorer / MSN - ICC Profiles Crash (PoC)

/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...

CVE-2005-2257

The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the authorid parameter...

CVE-2005-2257

PhpSlash 0.8.0 is affected by a vulnerability in the saveProfile function that allows remote attackers to modify arbitrary profiles and gain privileges by changing the author_id parameter. The available sources (CVE/NVD) describe the flaw and its impact as complete confidentiality, integrity, and...

CVE-2005-2257

The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the authorid parameter...

Microsoft Color Management Module buffer overflow during profile tag validation

Overview Microsoft Color Management Module contains a flaw that may allow an attacker to execute arbitrary code. Description The Microsoft Color Management Module provides consistent color management operations between applications and devices, and transforms between colorspaces such as 'RGB' and...

Hosting Controller 6.1 - User Profile Unauthorized Access

source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application to perform proper authentication before providing access t...

Hosting Controller 6.1 - User Profile Unauthorized Access

Hosting Controller 6.1 - User Profile Unauthorized Access source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application ...

CVE-2005-0712

Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles...

CVE-2005-0126

ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap...

CVE-2005-0899

AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search...

CVE-2005-0899

CVE-2005-0899 affects AS/400 OS/400 5.2 where LDAP is installed and enabled by default. The vulnerability allows remote authenticated users to obtain OS/400 user profiles by performing a search, indicating a potential information disclosure risk. The available documents do not specify a patch or ...

CVE-2005-0899

AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search...

CVE-2005-0712: Undefined Security Weakness

Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles...

CVE-2004-1394

An advisory for CVE-2004-1394 describes a local privilege escalation in Sun Solaris 8 and 9. The pfexec function fails to properly handle an invalid entry in the exec_attr database within a custom rights profile, potentially allowing local users with such profiles to execute profile commands with...

CVE-2005-0126: Undefined Security Weakness

ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap...