3533 matches found
CVE-2004-2551
Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via 1 the syscommentid parameter in editcommentenduser.asp, 2 the syssuspendid parameter in editsuspensionuser.asp, 3 the table parameter in exportdata.asp, 4 the sysanalgroup...
WS_FTP Server buffer overflow adn backdor
Buffer overflow in STAT and another commands. Built-in user accaount XXSESSMGRYY with password X1833 allows command execution on server...
CUPS stores user account details in plain text in log file
Overview When an SMB printer is configured, CUPS stores plain text login information to the log file. Description CUPS is a cross-platform printing system for UNIX environments. It can use the IPP, LPD, SMB, and JetDirect protocols to interact with printers. The SMB protocol is used to communicat...
GLSA-200411-25 : SquirrelMail: Encoded text XSS vulnerability
The remote host is affected by the vulnerability described in GLSA-200411-25 SquirrelMail: Encoded text XSS vulnerability SquirrelMail fails to properly sanitize certain strings when decoding specially crafted headers. Impact : By enticing a user to read a specially crafted e-mail, an attacker ca...
Debian DSA-585-1 : shadow - programming error
A vulnerability has been discovered in the shadow suite which provides programs like chfn and chsh. It is possible for a user, who is logged in but has an expired password to alter his account information with chfn or chsh without having to change the password. The problem was originally thought ...
[SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour
-------------------------------------------------------------------------- Debian Security Advisory DSA 585-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour
-------------------------------------------------------------------------- Debian Security Advisory DSA 585-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2004 http://www.debian.org/security/faq -...
Silent Storm Portal Multiple Vulnerabilities
No description provided by source. Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- form method="post" action="http://www.victim.com/index.php?module=../../profile" input type="text" name="mail" value="any mail com"br input type="hidden" name="mail"...
Silent Storm Portal - Multiple Vulnerabilities
Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- 1" ---/exploit.html--- That's All! What Happened? The 3rd line of exploit.html injected Administrator level "1" into the database file. 1: Administrator,2: is Normal User. milw0rm.com 2004-09-30...
Sendmail relaying
Predefined user account is used to initialize SASL database...
Intellipeer User Account Enumeration
Binary data 2332.prm...
Intellipeer POP3 Server User Account Enumeration
The remote POP3 server probably intellipeer pop3 server is vulnerable to an account enumeration issue. If an attacker attempts to log into the remote host by submitting a bogus username, then the server will reply with a specific error message if the account is nonexistent, while it will reply wi...
os-x/PPC Add user r00t 219 bytes
Exploit for os-x/ppc platform in category shellcode ================================ os-x/PPC Add user r00t 219 bytes ================================ / PPC OS X / Darwin Shellcode by B-r00t. 2003. open; write; close; execve; exit; See ASM below. 219 Bytes! / char shellcode =...
Oracle Enterprise Manager contains several vulnerabilities
Overview Several vulnerabilities exist in the Oracle Enterprise Manager. According the the Oracle Security Alert, exploitation of these vulnerabilities would require the attacker to have a valid operating system user account on the Enterprise Manager host. Description The Oracle Enterprise Manage...
GLSA-200406-15 : Usermin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200406-15 Usermin: Multiple vulnerabilities Usermin contains two security vulnerabilities. One fails to properly sanitize email messages that contain malicious HTML or script code and the other could allow an attacker to lock out ...
GLSA-200408-13 : kdebase, kdelibs: Multiple security issues
The remote host is affected by the vulnerability described in GLSA-200408-13 kdebase, kdelibs: Multiple security issues KDE contains three security issues: Insecure handling of temporary files when running KDE applications outside of the KDE environment DCOPServer creates temporary files in an...
Windows User Account Activity Delete User (via Splunk)
Binary data 710005.prm...
Windows User Account Activity Remove User from Group (via Splunk)
Binary data 710003.prm...