3829 matches found
CVE-2007-0628
Multiple cross-site scripting XSS vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 6.3, and 7 2005Q4 7.0 before 20070129 allow remote attackers to inject arbitrary web script or HTML via the 1 goto or 2 gx-charset parameter. NOTE: some of these details are obtained from third...
CVE-2007-0628
CVE-2007-0628 concerns multiple XSS vulnerabilities in Sun Java System Access Manager versions 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) prior to 20070129. The flaws allow remote attackers to inject arbitrary web script or HTML through the goto or gx-charset parameters. The NVD entry lists a C...
[SA23909] Shopping Basket Professional Command Injection
TITLE: Shopping Basket Professional Command Injection SECUNIA ADVISORY ID: SA23909 VERIFY ADVISORY: http://secunia.com/advisories/23909/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Shopping Basket Professional 7.x http://secunia.com/product/13345/ DESCRIPTION: A...
[SA23826] Django Two Vulnerabilities
TITLE: Django Two Vulnerabilities SECUNIA ADVISORY ID: SA23826 VERIFY ADVISORY: http://secunia.com/advisories/23826/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Django 0.x http://secunia.com/product/13287/ DESCRIPTION: Some vulnerabilities hav...
[SA23898] FreeWebShop.org "lang_file" File Inclusion Vulnerability
TITLE: FreeWebShop.org "langfile" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA23898 VERIFY ADVISORY: http://secunia.com/advisories/23898/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeWebshop.org Script 2.x http://secunia.com/product/12481/ DESCRIPTION:...
Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass
-------------------------------------------------------------------- Virginity Security Advisory 2007-001 - - - -------------------------------------------------------------------- DATE : 2007-01-19 15:32 GMT TYPE : remote VERSIONS AFFECTED : T-Com Speedport 500V Firmware 1.31 AUTHOR :...
[Full-disclosure] Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability
Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT09-01-2007 ======================================================= Microsoft Outlook Advanced Find - Remote Code Execution ======================================================= Advisory Date: 11th...
[SA22959] MoviePlay LST Playlist Parsing Buffer Overflow Vulnerability
TITLE: MoviePlay LST Playlist Parsing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA22959 VERIFY ADVISORY: http://secunia.com/advisories/22959/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MoviePlay 4.x http://secunia.com/product/13080/ DESCRIPTION: Parv...
[SA23492] w3m Certificate Handling Format String Vulnerability
TITLE: w3m Certificate Handling Format String Vulnerability SECUNIA ADVISORY ID: SA23492 VERIFY ADVISORY: http://secunia.com/advisories/23492/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: w3m 0.x http://secunia.com/product/12960/ DESCRIPTION: A vulnerability has be...
raptor_orafile.sql.txt
-- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.htm...
[SA23445] Sun Java JRE Multiple Vulnerabilities
TITLE: Sun Java JRE Multiple Vulnerabilities SECUNIA ADVISORY ID: SA23445 VERIFY ADVISORY: http://secunia.com/advisories/23445/ CRITICAL: Highly critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Sun Java JDK 1.5.x http://secunia.com/product/4621/ Sun Java JRE 1.5.x...
Oracle <= 9i / 10g File System Access via utl_file Exploit
Exploit for linux platform in category remote exploits ========================================================== Oracle -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.html. Use it to remotely -- read/write OS...
[SA23342] PhpLeague "cheminmini" File Inclusion Vulnerabilities
TITLE: PhpLeague "cheminmini" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA23342 VERIFY ADVISORY: http://secunia.com/advisories/23342/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PhpLeague 0.x http://secunia.com/product/11879/ DESCRIPTION: ajann and doubl...
CVE-2000-1242
The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...
CVE-2006-6435
The SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 does not generate authentication failure traps, which allows remote attackers to more easily gain system access and obtain sensitive information via a brut...
CVE-2006-6435
The CVE affects Xerox WorkCentre/WorkCentre Pro SNMP: versions prior to 12.050.03.000, 13.x prior to 13.050.03.000, and 14.x prior to 14.050.03.000 do not generate authentication failure traps, enabling remote attackers to perform brute-force login attempts to gain system access and obtain sensit...
[SA23201] MailEnable IMAP Service Buffer Overflow Vulnerability
TITLE: MailEnable IMAP Service Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA23201 VERIFY ADVISORY: http://secunia.com/advisories/23201/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: MailEnable Professional 2.x http://secunia.com/product/10625/ MailEnable...
Mambo Peoplebook Component 1.0 Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- Peoplebook Mambo Component = v1.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 14th 20...
PHP Simple Shop <= 2.0 (abs_path) Remote File Inclusion Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV44$2006 ------------------------------------------------------------------------------ ECHOADV44$2006 PHP Simple Shop = 2.0 abspath Remote File Inclusion...
Secunia Research: MailEnable IMAP Service Two Vulnerabilities
====================================================================== Secunia Research 30/11/2006 - MailEnable IMAP Service Two Vulnerabilities - ====================================================================== Table of Contents Affected...