6118 matches found
openssh DoS
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service CPU consumption via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector...
openssh DoS
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service CPU consumption via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector...
DEBIAN-CVE-2006-4924
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service CPU consumption via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector...
PT-2006-5246 · Cutenews · Cutenews
Name of the Vulnerable Software and Affected Versions: CuteNews versions 1.3.x Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the cutepath parameter to API endpoints such as "show news.php" or "search.php". However, analysis has not identifie...
security flaw
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...
security flaw
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...
ChatPat v1.0
ChatPat v1.0 Homepage: http://calendarscripts.info/download-3.html Description: An online chat room that lets users chat with each other. Effected files: fastchat.php fastshow.php The nickname input form doesn't sanatize user input before it adds it to the db. In turn this can cause SQL query...
[Full-disclosure] Skype emoticons problems / bugs
Skype 1.x havent tested on 2.x windows version has problems with emoticons when there is a big enough list of them like this :...
PT-2005-4445 · Xmb · Xmb
Name of the Vulnerable Software and Affected Versions: XMB version 1.9.2 Description: The issue allows remote attackers to obtain the installation path. This is achieved by providing an invalid fid parameter in a newthread action to the post.php file. Recommendations: For XMB version 1.9.2,...
DEBIAN-CVE-2005-3146
StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...
PHPList Vunerability
SVadvisory12 Title: SQl injection Product: OpenBook Version: 1.2.2 Site: http://openbook.sourceforge.net/ Vulnerabilities Code: function authuser$userid, $password global $HTTPPOSTVARS; global $admintable; $userid=$HTTPPOSTVARS'userid'; $password=$HTTPPOSTVARS'password'; dbconnect; $query="SELECT...
Exploti...
Try to ad thix exploit to Your files... ACNews 1.0 = Admin Authentication Bypass SQL Injection http://www.google.com/search?hl=en&lr=&q=acnews+1.0+login.asp&btnG=Search /str0ke Product:ACNews version :1.0 VULNERABILITY CLASS: SQL injection exploit Log in with username:' or 'x'='x password :' or...
FireFly 1.0 - Local Proxy Password Disclosure
/ FireFly v1.0 Local Exploit by Kozan Application: FireFly v1.0 Vendor: NetCruiser Software - www.netcruiser-software.com Vulnerable Description: FireFly v1.0 discloses proxy passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2:...
Einstein <= 1.01 Local Password Disclosure Exploit
Exploit for unknown platform in category local exploits ================================================== Einstein include HKEY hKey; define BUFSIZE 100 char usernameBUFSIZE, passwordBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int mainvoid ifRegOpenKeyExHKEYLOCALMACHINE,"Software\einstein", 0,...
my.phpforum.1.0.txt
/==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit member.php?action=viewpro&member=nonexist' UNION...
[SA12467] Tutti Nova Unspecified Vulnerabilities
TITLE: Tutti Nova Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA12467 VERIFY ADVISORY: http://secunia.com/advisories/12467/ CRITICAL: Highly critical IMPACT: Unknown WHERE: From remote SOFTWARE: Tutti Nova 0.x http://secunia.com/product/3868/ DESCRIPTION: Various unspecified vulnerabilities...
DOS@TFS
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :Application: TYPSoft FTP Server :Vendors: www.typsoft.com :Version: =1.11 :Platforms: Windows :Bug: D.O.S :Date: 2004-08-28 :Author: CoolICE :EMail: CoolICEChina.com...
RHEL 3 : lha (RHSA-2004:323)
An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...