PT-2006-5265 · Microsoft · Terminal Server

Name of the Vulnerable Software and Affected Versions: Microsoft Terminal Server affected versions not specified Description: The issue allows local users to execute arbitrary code by forcing an Explorer error when running an application session with specific options. These options, "Start progra...

CVE-2006-4302

The Java Plug-in J2SE 1.3.002 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities...

CVE-2006-4302

The Java Plug-in J2SE 1.3.002 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities...

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Wheatblog db != 'resource' touchDatabaseSession; Proof of Concept: www.site.com/includes/session.php?wbclassdir=SHELL 0day.today 2018-04-04...

CVE-2006-3926

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the 1 view or 2 start parameters to a viewfeedback.php or the 3 orderType parameter to b categories.php...

CVE-2006-3926

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the 1 view or 2 start parameters to a viewfeedback.php or the 3 orderType parameter to b categories.php...

Sql injection

SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2006-2855

CVE-2006-2855 describes an SQL injection in xueBook 1.0 where index.php is vulnerable via the start parameter. The root cause is insufficient input validation allowing arbitrary SQL execution by remote attackers. The vulnerability impact is remote compromise of the database (partial confidentiali...

xueBook 1.0 Version SQL Injection

xueBook 1.0 Version SQL Injection Credit : SpC-X Site : http://wWw.SaVSaK.CoM Greetz : | The-BeKiR | Liz0ziM | Poizonb0x | Erne | Code : http://www.target.com/path/index.php?start=SQL Example : http://www.secret-obsession.com/book/index.php?start=SQL /SpC-x -- Get your free email from...

Design/Logic Flaw

Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 allows remote attackers to cause a denial of service via forged "session start" messages that cause AVR to connect to arbitrary hosts...

CVE-2006-2706

Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 allows remote attackers to cause a denial of service via forged "session start" messages that cause AVR to connect to arbitrary hosts...

Information about the scan

This script displays, for each tested host, information about the scan itself: - The version of the VT feed - The type of VT feed Direct, Registered or GPL - The version of the Scanner Engine - The port scanners used - The port range scanned - The date of the scan - The duration of the scan - The...

Microsoft Windows - Telephony Service Command Execution (MS05-040)

Microsoft Windows - Telephony Service Command Execution MS05-040 // by Cesar Cerrudo - Argeniss - www.argeniss.com // // TAPI Vulnerability- MS05-040 // // Should work on Win2k sp0,sp1,sp2,sp3,sp4 any language // If Telephony Service is not running you can start it by net start "Telephony Service...

Sun JDK/JRE: Applet privilege escalation

Background Sun's JDK and JRE provide interpreters for Java Applets in a sandboxed environment. These implementations provide the Java Web Start technology that can be used for easy client-side deployment of Java applications. Description Applets executed using JRE or JDK can use "reflection" APIs...

GLSA-200602-07 : Sun JDK/JRE: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200602-07 Sun JDK/JRE: Applet privilege escalation Applets executed using JRE or JDK can use 'reflection' APIs functions to elevate its privileges beyond the sandbox restrictions. Adam Gowdiak discovered five vulnerabilities that...

Security feature bypass

Unspecified vulnerability in Java Web Start after 1.0.102, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain privileges via unspecified vectors involving untrusted applications...

CVE-2006-0613

Unspecified vulnerability in Java Web Start after 1.0.102, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain privileges via unspecified vectors involving untrusted applications...

CVE-2006-0613

CVE-2006-0613 affects Java Web Start in J2SE 5.0 Update 5 and earlier. The vulnerability, with an unspecified root cause, could allow a remote attacker to obtain privileges via untrusted Java Web Start applications. The issue was addressed by upgrading to Java SE 5.0 Update 6 or later (or disabli...

CVE-2006-0613

Unspecified vulnerability in Java Web Start after 1.0.102, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain privileges via unspecified vectors involving untrusted applications...

Sun Java Web Start security bypass vulnerability

Overview A vulnerability in the Sun Java Web Start may allow an untrusted Java applet or application to bypass security restrictions and execute arbitrary code. Description Java Web Start technology allows Java applications and applets to be executed via HTTP. Remote applications and applets are...