436 matches found
Gallery < 2.2.4 Multiple Vulnerabilities
Binary data 4540.prm...
Google Chrome < 1.0.154.53 Multiple Vulnerabilities
Binary data 5079.pasl...
IMail < 7.0.6 Account Hijacking
Binary data 1507.prm...
Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities
Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities // source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a...
wgetuhoh.txt
Tested software: Wget 1.9, Wget 1.9.1 Wget checks for the presence of a file with the same name of the one invoqued at the command line, if the file exists, then it saves the downloaded file with a different name. The problem is that Wget does not lock the file, and directly writes to it. So...
Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting
Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure...
Pegasi Web Server 0.2.2 - Arbitrary File Access
source: https://www.securityfocus.com/bid/9847/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. A successful cross-site scripting attack may make it possible for an attacker to...
Age of Sail II <= 1.04.151 Remote Buffer Overflow Exploit
Exploit for unknown platform in category dos / poc ========================================================= Age of Sail II include include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 1000...
NIPrint LPD-LPR Print Server <= 4.10 Remote Exploit
No description provided by source. / \ remote exploit for NIPrint LPD-LPR Print Server Version = 4.10 / \ by xCrZx /BLack Sand Project/ /04.11.03/ / \ bug found by KF / successfully tested on Win XP 5.1.2600 / P.S.1 coded just for fun... \ P.S.2 this exploit can be compiled under Win32 and nix /...
http commander 4.0 - Directory Traversal
http commander 4.0 - Directory Traversal source: https://www.securityfocus.com/bid/8948/info It has been reported that HTTP Commander is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '../' character sequences. Successful...
CVE-2003-0855
Pan 0.13.3 and earlier allows remote attackers to cause a denial of service crash via a news post with a long author email address...
CVE-1999-1461
inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program...
CVE-2001-0361
Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS1 version 1.5...
Re: Security hole in kicq
I tried with version 1.0.0, it is vulnerable for sure. Other versions such as 2.0.0b1 seem to be vulerable as well, though i did not compile them to try. one little try shows that licq http://licq.org is vulerable too however the complete url will be visible to the user. greets, Wolter...
CVE-1999-0206
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...
Oracle 8 - File Access
source: https://www.securityfocus.com/bid/170/info A number of security file access security vulnerabilities in suid programs that are part of Oracle may be exploited to obtain the privileges of the 'oracle' user and full access to the database system. Only the Unix version of Oracle is vulnerabl...