NateOn Messenger 3.0 - Arbitrary File Download Buffer Overflow

NateOn Messenger 3.0 - Arbitrary File Download Buffer Overflow source: https://www.securityfocus.com/bid/14974/info NateOn Messenger is susceptible to an arbitrary file download vulnerability, and a buffer overflow vulnerability. These issues are present in the 'NateonDownloadManager.ocx' ActiveX...

punBB < 1.2.7 Multiple SQL Injection Vulnerabilities

Binary data 3220.prm...

w-Agora index.php site Parameter Traversal Arbitrary File Access

The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could request a specially crafted URL to read arbitrary files on the remote system with the privileges of the web server...

HexView Security Advisory 0405-20-05.05

ShineShadow Security Report 04052005-05 TITLE: Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest,...

Allegro Software RomPager 2.10 Malformed Authentication Request DoS

The remote host is running Allegro Software RomPager version 2.10, according to its banner. This version is vulnerable to a denial of service attack that can be exploited by sending a specifically crafted request to crash the affected system. Sarju Bhagat GPLv2 include"compat.inc"; ifdescription...

punBB < 1.2.6 profile.php $temp Parameter SQL Injection (deprecated)

Binary data 3058.prm...

[SA15855] PostNuke XML-RPC Library PHP Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Software602 602Pro LAN SUITE < 2004.0.05.0509 Directory Traversal Arbitrary File Access

Binary data 2883.prm...

[SA15035] Heimdal Telnet Client Buffer Overflow Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Heimdal Telnet Client Buffer Overflow Vulnerabilities...

[Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage

February 28, 2005 Hat-Squad Advisory: GFI L.N.S.S 5.0- Insecure Credential Storage Product: GFI Languard Network Security Scanner Vendor Url: http://gfi.com/ Version: 5.0 Vulnerability: Insecure Credential Storage Release Date: February 28, 2005 Vendor Status: Informed on 22 February 2005 Respons...

ZeroBoard Multiple Vulnerabilities

Binary data 2636.prm...

Apple QuickTime 6.5.2.10 - .qtif Image Parsing

Apple QuickTime 6.5.2.10 - .qtif Image Parsing Added qtif on milw0rm's sploits archive/ /str0ke Application: QuickTime http://www.apple.com/quicktime/ AFFECTED VERSION: Versions verified to be vulnerable: QuickTime.qts 6.5.2.10 and prior versions are affected. The bug: The problem specifically...

[SA12226] tnftpd Signal Handling Privilege Escalation Vulnerabilities

TITLE: tnftpd Signal Handling Privilege Escalation Vulnerabilities SECUNIA ADVISORY ID: SA12226 VERIFY ADVISORY: http://secunia.com/advisories/12226/ CRITICAL: Moderately critical IMPACT: System access, Privilege escalation WHERE: From remote SOFTWARE: tnftpd http://secunia.com/product/3800/...

SUSE-SA:2003:001: fetchmail

The remote host is missing the patch for the advisory SUSE-SA:2003:001 fetchmail. fetchmail is used to download emails from POP-, IMAP-, ETRN- or ODMR- servers. Stefan Esser of e-matters reported a bug in fetchmail's mail address expanding code which can lead to remote system compromise. When...

IBM EGatherer 2.0 - ActiveX Control Dangerous Method

source: https://www.securityfocus.com/bid/10562/info It is reported that the IBM eGatherer ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a malicious website and may result i...

netobserve.txt

NetObserve Security Bypass Vulnerability Credit: Author : Peter Winter-Smith Software: Packages : NetObserve Version : 2.0 and prior Vendor : ExploreAnywhere Software Vendor Url : http://www.exploreanywhere.com/no-intro.php Vulnerability: Bug Type : Security Bypass Severity : Highly Critical +...

Session Initiation Protocol Detection

The remote system is running software that speaks the Session Initiation Protocol SIP. SIP is a messaging protocol to initiate communication sessions between systems. It is a protocol used mostly in IP Telephony networks / systems to setup, control, and teardown sessions between two or more...

SARA crossite scripting

Crossite scripting on displaying remote sustem scan results...

Compaq Web-enabled Management Software Default Account

The Compaq Web-based Management / HP System Management Agent active on the remote host is configured with the default, or a predictable, administrator password. Depending on the agents integrated, this allows an attacker to view sensitive and verbose system information, and may even allow more...

Overnet Detection

The remote server seems to be a Overnet peer-to-peer client, which may not be suitable for a business environment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11845; scriptversion"$Revision: 1.11 $"; scriptcvsdate"$Date: 2013/02/15 02:47:03 $";...