SquirrelMail "Content-Type" XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =============================== - RS-Labs Security Advisory - =============================== Tittle: SquirrelMail "Content-Type" XSS vulnerability ID: RS-2004-1 Severity: Medium / High - Arbitrary tags injection in victim's browser context Date:...

Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service

source: https://www.securityfocus.com/bid/10351/info It has been reported that Internet Explorer is prone to a denial of service vulnerability when processing a malicious script containing the 'window.createPopup' method to invoke the 'http-equiv' meta tag. This issue could be exploited by a remo...

Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service

Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service source: https://www.securityfocus.com/bid/10351/info It has been reported that Internet Explorer is prone to a denial of service vulnerability when processing a malicious script containing the 'window.createPopup' method to...

Vulnerabilities In PHPX 3.26 And Earlier

Vendor : PHPX URL : http://www.phpx.org Version : PHPX 3.26 && Earlier Risk : Multiple Vulnerabilities Description: PHPX is a constantly evolving and changing Content Management System CMS. PHPX is highly customizable and high powered all in one system. PHPX provides content management combined...

SMF SIZE Tag Script Injection Vulnerability

Advisory Name : SMF SIZE Tag Script Injection Vulnerability Release Date : May 3,2004 Application : Simple Machines Test On : SMF 1.0 Beta 5 Public Vendor URL : http://www.simplemachines.org/ Discover : Cheng Peng Suapplesoupatmsn.com Intro: The team that has brought you YaBB SE has moved on to...

CVE-2004-1967

Cross-site request forgery CSRF vulnerabilities in 1 cpforums.php, 2 cpusergroup.php, 3 cpipbans.php, 4 myhome.php, 5 post.php, or 6 moderator.php in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link...

CVE-2004-1872

Cross-site scripting XSS vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag...

CVE-2004-1868

Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag...

Microsoft Windows XP - 'explorer.exe' Remote Denial of Service

source: https://www.securityfocus.com/bid/9924/info Microsoft Windows Explorer for Windows XP has been reported to be prone to a remote denial of service vulnerability. This issue is due to a failure of the application to properly validate user-supplied input via the 'shell:' command. The 'shell:...

PHP-Nuke 6.x7.07.1 - Image Tag Admin Command Execution

PHP-Nuke 6.x7.07.1 - Image Tag Admin Command Execution source: https://www.securityfocus.com/bid/9895/info It has been reported that PHP-Nuke is prone to a remote admin command execution vulnerability. This issue is due to a design error that allows an attacker to specify arbitrary URI values in...

CVE-2004-1827

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...

Remote crash in Ghost Recon engine

Luigi Auriemma Application: Ghost Recon engine and some games developed by Redstorm http://www.ghostrecon.com Games/Ver: Ghost Recon = 1.4 Desert Siege The Sum of all Fears = 1.1.1.0 Platforms: Windows Bug: remote crash, possible system freeze Risk: high Exploitation: remote, versus both server a...

Sami FTP Server Multiple DoS

The remote host is running SAMI FTP server. There is a bug in the way this server handles certain FTP command requests that may allow an attacker to crash the affected service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12061; scriptversion"1.23";...

CVE-2003-1091

Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed ID3 tags in MP3 files...

security flaw

raddecode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute...

FreeRadius 0.x/1.1.x - Tag Field Heap Corruption

source: https://www.securityfocus.com/bid/9079/info FreeRADIUS is prone to a heap-corruption vulnerability when handling of tag-field input. An attacker may be able to exploit this issue to deny service to legitimate users of a vulnerable FreeRADIUS server. This issue was initially reported as a...

FreeRadius 0.x1.1.x - Tag Field Heap Corruption

FreeRadius 0.x1.1.x - Tag Field Heap Corruption source: https://www.securityfocus.com/bid/9079/info FreeRADIUS is prone to a heap-corruption vulnerability when handling of tag-field input. An attacker may be able to exploit this issue to deny service to legitimate users of a vulnerable FreeRADIUS...

Opera Skinned & Opera Directory Traversal (Additional Details & a Simple Exploit)

Opera Skinned & Opera Directory Traversal Additional Details & a Simple Exploit: ================================================================================== ADDITIONAL DETAILS: While installing Opera, if the "USE SEPARATE SETTINGS FOR EACH USER" option is selected, the "opera7/profile"...

[Full-Disclosure] sh-httpd `wildcard character' vulnerability

======================================== INetCop Security Advisory 2003-0x82-019 ======================================== Title: sh-httpd wildcard character' vulnerability 0x01. Description About: sh-httpd is a shell script-based Web server that supports GET and HEAD methods, and a CGI 1.1...

[Full-Disclosure] MDKSA-2003:101 - Updated fetchmail packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: fetchmail Advisory ID: MDKSA-2003:101 Date: October 16th, 2003 Affected versions: 9.2 Problem Description: A bug was discovered in fetchmail 6.2.4 where a specially crafted email message can cause...