3437 matches found
CVE-2007-0059: Undefined Security Weakness
Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...
CVE-2007-0051
Format string vulnerability in Apple iPhoto 6.0.5 316, and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed...
CVE-2007-0051: Use of Externally-Controlled Format String
Format string vulnerability in Apple iPhoto 6.0.5 316, and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed...
CVE-2006-4580
register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by setting the mode parameter to "confirm"...
Enthrallweb eNews 1.0 Remote User Pass Change Exploit
Exploit for unknown platform in category web applications ===================================================== Enthrallweb eNews 1.0 Remote User Pass Change Exploit ===================================================== User Id: PASSWORD: FIRST: LAST:/fo...
Enthrallweb eNews 1.0 - Remote User Pass Change
User Id: PASSWORD: FIRST: LAST: tr valign="baseline...
Enthrallweb eNews 1.0 Remote User Pass Change Exploit
No description provided by source. form action="target/classifieds/myprofile.asp" method="POST" name="form2" User Id: input type="text" name="MMrecordId" value="1" p/p table align="center" cellpadding="1" cellspacing="1" tr valign="baseline" td align="right" nowrap class="title"strongfont...
Enthrallweb eNews 1.0 - Remote User Pass Change
Enthrallweb eNews 1.0 - Remote User Pass Change User Id: PASSWORD: FIRST: LAST:...
Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit
No description provided by source. form action="target/myprofile.asp" method="POST" name="form2" p/p table align="center" cellpadding="1" cellspacing="1" tr valign="baseline" td align="right" nowrap class="title" Change Profile=Username input type="text" name="MMrecordId" value="ajann" /td td inp...
Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit
Exploit for unknown platform in category web applications ============================================================ Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit ============================================================ Change Profile=Username FIRST: LAST:...
CVE-2006-6598
Directory traversal vulnerability in viewnfo.php in 1 TorrentFlux before 2.2 and 2 torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the path parameter, a different vector than CVE-2006-6328...
Debian DSA-1230-1 : l2tpns - buffer overflow
Rhys Kidd discovered a vulnerability in l2tpns, a layer 2 tunnelling protocol network server, which could be triggered by a remote user to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
DSA-1230-1 l2tpns
Bulletin has no description...
CVE-2006-6330
index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...
Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit
No description provided by source. !-- Title : Online Event Registration = v2.0 saveprofile.asp Remote User Pass Change Exploit Author : ajann Code -- html body bgcolor="000000" form method="POST" action="saveprofile.asp?key=1®key=" User Nameinput type="hidden" name="UserID" size="4" input...
Online Event Registration 2.0 - 'save_profile.asp' Pass Change
User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-11-13...
ActiveX security leaks in the TV owned web game platform
There is a security problem within the architecture / design issues of the BlooMooWeb ActiveX control. BlooMooWeb is an internet game platform for kids, popular mainly in Poland. It has been provided for the TV programme "Krolestwo Maciusia" "The Kingdom of Macius" broadcast in TVP1 - first chann...
TIBCO RendezVous Buffer Overflow (Exploit)
No description provided by source. / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acu a atarasco @ sia.es Advisory: http://www.514.es Url: http://www.sia.es...
Active Bulletin Board v1.1 beta2 (doprofiledit.asp) Remote User Pass Change
!-- Title : Active Bulletin Board v1.1 beta2 doprofiledit.asp Remote User Pass Change Exploit Author : ajann Dork : "Forum Active Bulletin Board version 1.1 bta 2" Greetz : Ramazan'iniz,Mbarek,Olsun,Tm,Mslman,Alemi|Ge,Oldu,Biraz : Code -- html body bgcolor="000000" form method="POST"...
Active Bulletin Board <= 1.1b2 Remote User Pass Change Exploit
No description provided by source. !-- Title : Active Bulletin Board v1.1 beta2 doprofiledit.asp Remote User Pass Change Exploit Author : ajann Dork : "Forum Active Bulletin Board version 1.1 béta 2" Greetz : Ramazan'iniz,Mübarek,Olsun,Tüm,Müslüman,Alemi|Geç,Oldu,Biraz : Code -- html body...