Enthrallweb eNews 1.0 Remote User Pass Change Exploit

Exploit for unknown platform in category web applications ===================================================== Enthrallweb eNews 1.0 Remote User Pass Change Exploit ===================================================== User Id: PASSWORD: FIRST: LAST:/fo...

Enthrallweb eNews 1.0 - Remote User Pass Change

User Id: PASSWORD: FIRST: LAST: tr valign="baseline...

Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit

No description provided by source. form action="target/myprofile.asp" method="POST" name="form2" p/p table align="center" cellpadding="1" cellspacing="1" tr valign="baseline" td align="right" nowrap class="title" Change Profile=Username input type="text" name="MMrecordId" value="ajann" /td td inp...

Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit

Exploit for unknown platform in category web applications ============================================================ Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit ============================================================ Change Profile=Username FIRST: LAST:...

CVE-2006-6598

Directory traversal vulnerability in viewnfo.php in 1 TorrentFlux before 2.2 and 2 torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the path parameter, a different vector than CVE-2006-6328...

Debian DSA-1230-1 : l2tpns - buffer overflow

Rhys Kidd discovered a vulnerability in l2tpns, a layer 2 tunnelling protocol network server, which could be triggered by a remote user to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

DSA-1230-1 l2tpns

Bulletin has no description...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit

No description provided by source. !-- Title : Online Event Registration = v2.0 saveprofile.asp Remote User Pass Change Exploit Author : ajann Code -- html body bgcolor="000000" form method="POST" action="saveprofile.asp?key=1&regkey=" User Nameinput type="hidden" name="UserID" size="4" input...

Online Event Registration 2.0 - 'save_profile.asp' Pass Change

User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-11-13...

ActiveX security leaks in the TV owned web game platform

There is a security problem within the architecture / design issues of the BlooMooWeb ActiveX control. BlooMooWeb is an internet game platform for kids, popular mainly in Poland. It has been provided for the TV programme "Krolestwo Maciusia" "The Kingdom of Macius" broadcast in TVP1 - first chann...

TIBCO RendezVous Buffer Overflow (Exploit)

No description provided by source. / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acu a atarasco @ sia.es Advisory: http://www.514.es Url: http://www.sia.es...

Active Bulletin Board v1.1 beta2 (doprofiledit.asp) Remote User Pass Change

!-- Title : Active Bulletin Board v1.1 beta2 doprofiledit.asp Remote User Pass Change Exploit Author : ajann Dork : "Forum Active Bulletin Board version 1.1 bta 2" Greetz : Ramazan'iniz,Mbarek,Olsun,Tm,Mslman,Alemi|Ge,Oldu,Biraz : Code -- html body bgcolor="000000" form method="POST"...

Active Bulletin Board <= 1.1b2 Remote User Pass Change Exploit

No description provided by source. !-- Title : Active Bulletin Board v1.1 beta2 doprofiledit.asp Remote User Pass Change Exploit Author : ajann Dork : "Forum Active Bulletin Board version 1.1 béta 2" Greetz : Ramazan'iniz,Mübarek,Olsun,Tüm,Müslüman,Alemi|Geç,Oldu,Biraz : Code -- html body...

Active Bulletin Board 1.1b2 - Remote User Pass Change

Active Bulletin Board 1.1b2 - Remote User Pass Change Email: Password:: = ID Change: = UsrName Next to admin.asp ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-10-18...

CVE-2006-3651

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

CVE-2006-4685

The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains...

CVE-2006-3864

Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a 1 .DOC, 2 .PPT, or 3 .XLS file that triggers memory corruption, related to an "arra...

CVE-2006-4692

Argument injection vulnerability in the Windows Object Packager packager.exe in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" slash character in the filename of the Command Line...

CVE-2006-4693

Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651...