XSS vulnerability in browseusers.vm

browseusers.vm does not escape usernames...

Code injection

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames...

Firebird: Multiple vulnerabilities

Background Firebird is a multi-platform, open source relational database. Description Firebird does not properly handle certain types of XDR requests, resulting in an integer overflow CVE-2008-0387. Furthermore, it is vulnerable to a buffer overflow when processing usernames CVE-2008-0467. Impact...

Joomla Component Quiz <= 0.81 (tid) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomquizusertstshw AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: comquiz"tid" DORK 2 : allinurl: comquiz EXPLOIT : ALL PASSWORD AND USERNAME UNDE...

joomlamcquiz-sql.txt

joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDER PAGE...

joomlaako-sql.txt

joomla SQL Injectioncomakogallery AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comakogallery" EXPLOIT :...

Debian Security Advisory DSA 566-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 566-1. OpenVAS Vulnerability Test $Id: deb5661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 566-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1452-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5404

Layton HelpBox 3.7.1 is affected by a username enumeration flaw: authentication responses differ for valid vs. invalid usernames during failed login, enabling remote attackers to determine valid usernames. The CVE description from NVD confirms the issue and impact is limited to credential enumera...

PT-2008-1785 · Pragma · Fortressssh

Name of the Vulnerable Software and Affected Versions: Pragma FortressSSH versions 5.0 Build 4 Revision 293 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically connection slot exhaustion, by flooding the system with SSH connections containing long...

Debian DSA-1452-1 : wzdftpd - denial of service

'k1tk4t' discovered that wzdftpd, a portable, modular, small and efficient ftp server, did not correctly handle the receipt of long usernames. This could allow remote users to cause the daemon to exit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

DSA-1452-1 wzdftpd denial of service

Bulletin has no description...

CVE-2007-6638

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz...

CVE-2007-6638

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz...

PHP Real Estate Classifieds "id" SQL Injection

t0pP8uZz & xprog have reported a vulnerability in PHP Real Estate Classifieds, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "id" parameter in fullnews.php is not properly sanitised before being used in SQL queries. This can be exploited to...

PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users

PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users Description: BEA Plumtree portal 6.0 is vulnerable to username leakage through the search facility. By performing an advanced search, unauthenticated users can enumerate valid usernames with a single HTTP reques...

Code injection

portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the intxfulltext parameter...

BEA AquaLogic Interaction 6.06.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities

BEA AquaLogic Interaction 6.06.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/26620/info BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to access valid usernam...

BEA AquaLogic Interaction 6.0/6.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/26620/info BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to access valid usernames in the Plumtree portal as well as the server hostname, build date, and server version. Informati...

audit logging of failed logins

Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party informatio...