QQLan : XSS - WEB = Cross-Applications Scripting

July 25, 2005| coded by [email protected] XSS - WEB = Cross-Applications Scripting Buffer overflows are getting tough now. Users have set up all sorts of "personal firewalls", compilers are introducing all sorts of tricky preprocessors that go crazy at the sight of strcpy and control overwriting...

Bypassing of web filters by using ASCII

iKu Advisory Product : Microsoft InternetExplorer 6 : various filter applications Date : June 20th 2006 Affected versions : all Vulnerability Type : bypassing security filters Severity 1-10 : 10 Remote : yes 0. contents 1. problem description 2. affected software 3. bug description/possible fix 4...

RealVNC 4.1.0 - 4.1.1 (VNC Null Authentication) Vulnerability Scanners

Exploit for multiple platform in category remote exploits ====================================================================== RealVNC 4.1.0 - 4.1.1 VNC Null Authentication Vulnerability Scanners ====================================================================== class101 -...

GLSA-200603-07 : flex: Potential insecure code generation

The remote host is affected by the vulnerability described in GLSA-200603-07 flex: Potential insecure code generation Chris Moore discovered a buffer overflow in a special class of lexicographical scanners generated by flex. Only scanners generated by grammars which use either REJECT, or rules wi...

Ubuntu 4.10 / 5.04 / 5.10 : flex vulnerability (USN-260-1)

Chris Moore discovered a buffer overflow in a particular class of lexicographical scanners generated by flex. This could be exploited to execute arbitrary code by processing specially crafted user-defined input to an application that uses a flex scanner for parsing. This flaw particularly affects...

Design/Logic Flaw

Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...

CVE-2006-0166

Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...

CVE-2006-0166

Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...

Multiple vulnerability scanners cross application scripting

Unsafe data obtained during remote host scan is passed to Internet Explorer...

Check open ports

This plugin checks if the port scanners did not kill a service. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Services known to crash or free...

Foreign hackers resources-vulnerability warning-the black bar safety net

allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...

HPRadiaManagement.txt

NGSSoftware Insight Security Research Advisory Name: HP OpenView Radia Management Agent remote command execution via directory traversal Systems Affected: HP OpenView Radia Management Portal versions 2.x and 1.x running Radia Management Agent Severity: High Vendor URL: http://www.hp.com/ Authors:...

MIME-tools: Virus detection evasion

Background MIME-tools is a Perl module containing functions to handle MIME attachments. Description MIME-tools doesn't correctly parse attachment boundaries with an empty name boundary="". Impact An attacker could send a carefully crafted email and evade detection on some email virus-scanning...

External Scanner Service Identification

This plugin registers services that were identified by external scanners amap, nmap, etc.... It does not perform any fingerprinting by itself. C Tenable Network Security, Inc. We could do this job in amap.nasl or nmap.nasl, but as those plugins must be signed to be "trusted", we don't want to...

Multiple vendors' HTTP content/virus scanners do not check data tunneled via HTTP CONNECT method

Overview Multiple vendors' HTTP anti-virus and content filters do not inspect the contents of HTTP CONNECT method tunnels. As a result, viruses or other restricted HTTP content may not be blocked as specified by policy. Description Many anti-virus and content filter products that are designed to...

MIME::Tools Perl module and virus scanners

Background ---------- MIME::Tools is a very nice Perl module for parsing and constructing MIME-encoded mail messages. The latest stable version is 5.411a. MIME::Tools works very well on valid MIME messages. However, there are a number of problems if you use it to implement server-based mail...

Outlook \r expliots - ripMIME fix.

A recent announcement of ripMIME 1.2.12 has been superceded with a new release which covers several issues as mentioned in [email protected]'s content-exploits analysis post. Specifically, "0 data poisoning" and "fake-end-of-line termination" due to fgets have been immediately covered. Issu...

McAfee 4.0 Network Associates for Windows NT 4.0.24.0.3 a Norton AntiVirus 2000 - Recycle Bin Exclusion

McAfee 4.0 Network Associates for Windows NT 4.0.24.0.3 a Norton AntiVirus 2000 - Recycle Bin Exclusion McAfee VirusScan 4.0,Network Associates VirusScan for Windows NT 4.0.2/4.0.3 a,Symantec Norton AntiVirus 2000 Recycle Bin Exclusion Vulnerability source:...