1787 matches found
CVE-2007-6389
The CVE-2007-6389 issue affects gnome-screensaver 2.20.0, where the notify feature could let a local user read clipboard contents and X selection data from a locked session by using Ctrl-V. The vulnerability originates from how the notify mechanism handles input during a locked session, enabling ...
CVE-2007-6389
The notify feature in GNOME screensaver gnome-screensaver 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V...
CVE-2007-6389: Undefined Security Weakness
The notify feature in GNOME screensaver gnome-screensaver 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V...
joblister-sql.txt
JobLister3 by SkilMatch Staffing Systems, Inc. Multiple SQL injection vulnerabilities http://www.dubdubdub.com/ http://www.skilmatch.com/ The search form filed doesnt strip special characters that have special meanings. A single quote makes the application spit out a number of errors. This is not...
DEBIAN-CVE-2007-4099
Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks...
Stack overflow
Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...
CVE-2007-1735
Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...
CVE-2007-1735
Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...
Corel Wordperfect Office X3 Stack Overflow
Product Name: Wordperfect X3 13.0.0.565 Vendor: http://www.corel.com Date: 28 March, 2007 Author: Jonathan So jonny @ nop-art dot net Advisory URL: http://www.nop-art.net/advisories/wpwinX3.txt I. DESCRIPTION A stack overflow vulnerability has been found in Wordperfect X3. The vulnerability could...
CVE-2007-1735: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...
portal-sql.txt
use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = ; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Plz Select User ID:" ; %turk = "site" =...
Cross site scripting
Cross-site scripting XSS vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the newlang parameter to login.php...
CVE-2007-1473
Cross-site scripting XSS vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the newlang parameter to login.php...
CVE-2006-6977
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
CVE-2006-6978: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
CVE-2006-6977: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
phpBB ezBoard Converter 0.2 - ezconvert_dir Remote File Inclusion
phpBB ezBoard Converter 0.2 - ezconvertdir Remote File Inclusion C xoron Name: ezConvert: phpBB ezBoard converter v0.2 ezconvertdir Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=114129 xoron.biz - xoron.info...
CVE-2006-3831
The Backup selection in Kailash Nadh boastMachine formerly bMachine 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file...
Memory corruption
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302...
CVE-2006-1301
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302...