Oracle E-Business Suite SQL Injection vulnerabilities

Overview Oracle E-Business Suite fails to filter user input permiting the exploitation of SQL injection vulnerabilities. These vulnerabilities may allow a remote attacker to execute procedures or SQL queries and updates on the vulnerable database application. Description According to the Oracle...

IBM EGatherer 2.0 - ActiveX Control Dangerous Method

source: https://www.securityfocus.com/bid/10562/info It is reported that the IBM eGatherer ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a malicious website and may result i...

Microsoft Windows LSASS Buffer Overrun Vulnerability

Description Microsoft Windows LSASS Local Security Authority Subsystem Service is prone to a remotely exploitable buffer overrun vulnerability. The specific vulnerable system component is LSASRV.DLL. Successful exploitation of this issue could allow a remote attacker to execute malicious code on ...

JSinject.txt

Sandblad advisory 12 - /--------------------------------------------------------------/ Title: Inject javascript url in history list revisited Date: 2004-02-03 Software: Internet Explorer Vendor: http://www.microsoft.com/ Status: Patched by MS04-004 Type: Cross site/zone scripting Impact: Reading...

Qualiteam X-Cart 3.x - 'general.php?perl_binary' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/9560/info X-Cart has been reported to be prone to an issue that may allow remote attackers to execute arbitrary commands on the affected system. The issue is caused by a failure of the application to sanitize values specified by parameters in the URI...

NETObserve 2.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/9319/info NETObserve is prone to a vulnerability that may permit remote unauthenticated users to access functions of the software. Due to the nature of the software, this could permit an attacker to execute commands remotely on an underlying system runnin...

NETObserve 2.0 - Authentication Bypass

NETObserve 2.0 - Authentication Bypass source: https://www.securityfocus.com/bid/9319/info NETObserve is prone to a vulnerability that may permit remote unauthenticated users to access functions of the software. Due to the nature of the software, this could permit an attacker to execute commands...

Bug in libXcursor , is it exploitable?

INTRO: ------------------------------------------------------------------ off-by-one bug in libXcursor that shows up when $HOME does not start with a '/'. THE QUESTION: ------------------------------------------------------------------ Could this bug compromise a system? In what cases? TEST:...

Microsoft Windows XP2000 - Messenger Service Buffer Overrun (MS03-043)

Microsoft Windows XP2000 - Messenger Service Buffer Overrun MS03-043 // source: https://www.securityfocus.com/bid/8826/info Microsoft Windows Messenger Service is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of messages before they are...

Microsoft Windows XP/2000 - Messenger Service Buffer Overrun (MS03-043)

// source: https://www.securityfocus.com/bid/8826/info Microsoft Windows Messenger Service is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of messages before they are passed to an internal buffer. Exploitation could result in a denial o...

Microsoft Windows Messenger Service Buffer Overrun Vulnerability

Description Microsoft Windows Messenger Service is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of messages before they are passed to an internal buffer. Exploitation could result in a denial of service or in execution of malicious code...

MS03-039 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'e' and the password 'asd321'. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS03-039 creates such an account. This probably means that the remote host has been compromised by the use of...

WIDZ 1.01.5 - Remote Code Execution

WIDZ 1.01.5 - Remote Code Execution source: https://www.securityfocus.com/bid/8479/info WIDZ does not validate untrusted input when generating alerts. Alerts pass the essid of an unknown wireless access point through a system call. By setting the essid of an unauthorized access point to include...

Microsoft Security Bulletin MS03-033: Unchecked Buffer in MDAC Function Could Enable System Compromise (Q823718)

-----BEGIN PGP SIGNED MESSAGE----- - ----------------------------------------------------------------- Title: Unchecked Buffer in MDAC Function Could Enable System Compromise 823718 Date: 20 August 2003 Software: - Microsoft Data Access Components 2.5 - Microsoft Data Access Components 2.6 -...

Microsoft Security Bulletin MS03-030: Unchecked Buffer in DirectX Could Enable System Compromise (Q819696)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in DirectX Could Enable System Compromise 819696 Date: July 23, 2003 Software: Microsoft DirectXr 5.2 on Windows 98 Microsoft DirectX 6.1 on Windows 98 SE Microsoft...

SuSE Security Announcement: radiusd-cistron (SuSE-SA:2003:030)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: radiusd-cistron Announcement-ID: SuSE-SA:2003:030 Date: Friday, Jun 13th 2003 09:32 MET Affected products: 7.2, 7.3, 8.0 Vulnerability Type: possible remote system compromise SuSE default package: no Cross References:...

Buffer overflow vulnerability found in MailMax version 5

, / | / / / Buffer Overflow Vulnerability / / / / / Found in MailMax Version 5 / / , http://www.smartmax.com / / | // matrix at 0x36.org ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOoo SUMMARY------------------------------------------------------------------- This i...

Youngzsoft CMailServer 4.0 - MAIL FROM Buffer Overflow

Youngzsoft CMailServer 4.0 - MAIL FROM Buffer Overflow source: https://www.securityfocus.com/bid/7547/info A buffer overflow vulnerability has been reported for CMailServer. The vulnerability exists due to insufficient bounds checking when parsing e-mail headers. Specifically, an overly long MAIL...

Youngzsoft CMailServer 4.0 - RCPT TO Buffer Overflow

Youngzsoft CMailServer 4.0 - RCPT TO Buffer Overflow source: https://www.securityfocus.com/bid/7548/info A buffer overflow vulnerability has been reported for CMailServer. The vulnerability exists due to insufficient bounds checking when parsing e-mail headers. Specifically, an overly long RCPT T...

Youngzsoft CMailServer 4.0 - MAIL FROM Buffer Overflow

source: https://www.securityfocus.com/bid/7547/info A buffer overflow vulnerability has been reported for CMailServer. The vulnerability exists due to insufficient bounds checking when parsing e-mail headers. Specifically, an overly long MAIL FROM e-mail header will cause CMailServer to crash and...