DEBIAN-CVE-2008-1377

The 1 SProcRecordCreateContext and 2 SProcRecordRegisterClients functions in the Record extension and the 3 SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with...

X.org MIT-SHM extension arbitrary memory read

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

Apache Httpd < 2.2.9 : mod_proxy_http DoS

A flaw was found in the handling of excessive interim responses from an origin server when using modproxyhttp. A remote attacker could cause a denial of service or high memory usage...

Sun Java System Web Server cross-site scripting vulnerability

Overview Sun Java System Web Server originally called Sun ONE Web Server contains a cross-site scripting vulnerability. A vulnerable web server does not adequately validate the HTTP REFERER header before using the contents in the default error page. Impact A malicious script may be executed on th...

Server: shell command injection in CGI replication monitor

The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...

Sql injection

SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with 1 statprt/js/request or 2 dyn/js/request in the PATHINFO...

Design/Logic Flaw

The Digital Photo Access Protocol DPAP server for iPhoto 4.0.3 allows remote attackers to cause a denial of service crash via a malformed dpap: URI, a different vulnerability than CVE-2008-0043...

CVE-2008-0830

The Digital Photo Access Protocol DPAP server for iPhoto 4.0.3 allows remote attackers to cause a denial of service crash via a malformed dpap: URI, a different vulnerability than CVE-2008-0043...

Magic applications like Server vulnerability-vulnerability warning-the black bar safety net

Author: kEvin198... article source: hacker Defense Shortly before I often go to a music website suddenly announced the indefinite closure,but reserved for VIPs download right. This message is for the avid music lovers as a Thunderbolt. But there is no way,someone else's Station not shut off is...

Design/Logic Flaw

The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi...

Xorg / XFree86 file existence disclosure vulnerability

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

phpecho-sql.txt

PHPEcho CMS Remote SQL Injection Exploit Product: PHPEchoCM License: GPL For version: 2.0 AUTHOR : Stack-Terrorist v40 HOME : http://v4-team.com EMAIL: [email protected] & [email protected] download script : http://sourceforge.net/project/showfiles.php?groupid=186100 EXPLOITS : username :...

Windows system under the remote stack overflow combat-vulnerability warning-the black bar safety net

Code author:Ipxodi The following is a problem of the internet services program: // / server.cpp By Ipxodi / include winsock2. h include stdio. h char Buff1 0 2 4; void overflowchar s,int size char s15 0; printf"receive %d bytes",size; ssize=0; strcpys1,s; int main WSADATA wsa; SOCKET listenFD; in...

PHP Webquest 2.6 - Get Database Credentials

PHP Webquest 2.6 - Get Database Credentials --==+================================================================================+==-- --==+ PHP Webquest 2.6 Get Database's Credential +==-- --==+================================================================================+==-- Author: MhZ91...

PHP Webquest 2.6 - Get Database Credentials

--==+================================================================================+==-- --==+ PHP Webquest 2.6 Get Database's Credential +==-- --==+================================================================================+==-- Author: MhZ91 Title: PHP Webquest 2.6 Get Database's...

Rejetto HTTP File Server (HFS) 2.2/2.3 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/26732/info HFS HTTP File Server is prone to a vulnerability that lets attackers upload files and place them in arbitrary locations on the server. The issue occurs because the software fails to adequately sanitize user-supplied input. A successful exploit...

DTSA-73-1 xorg-server - buffer overflow

Bulletin has no description...

wwwisis-xssfile.txt

WWWISIS Search Multiple Vulnerabilities Download: http://bvsmodelo.bvsalud.org/php/level.php?lang=en&component=31&item=2 Bug found by JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com d0rk: powered by WWWISIS Stop lammer Local File Disclosure Vulnerability:...

CVE-2007-5264

The CVE-2007-5264 issue affects Battlefront Dropteam 1.3.3 and earlier. The vulnerability is that the game client sends the user’s online account name and password to the game server, allowing malicious servers to steal credentials (partial confidentiality impact). The NVD entry cites a base scor...

Format string in F.E.A.R. 1.08 through PB

Luigi Auriemma Application: F.E.A.R. First Encounter Assault Recon http://www.whatisfear.com Versions: = 1.08 Platforms: Windows and Linux Bug: format string Exploitation: remote, versus server with Punkbuster enabled Date: 01 Oct 2007 Author: Luigi Auriemma e-mail: [email protected] web:...