8468 matches found
osCommerce 2.12.2 - Checkout_Payment.php Error Output Cross-Site Scripting
osCommerce 2.12.2 - CheckoutPayment.php Error Output Cross-Site Scripting source: https://www.securityfocus.com/bid/7155/info Error output is not sufficiently sanitized of HTML and script code by osCommerce. This may allow for cross-site scripting attacks as remote users could create a malicious...
DEBIAN-CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB...
DEBIAN-CVE-2002-0916
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...
PT-2001-1854 · Microsoft · Internet Explorer +2
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 6 and earlier Description: The issue allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later...
Squid doesn't quote urls in error messages.
Hi, I noticed that Squid 2.3.STABLE4 doesn't quote urls in error messages. For example if a user visits the following url http://www.dotcom.com/ btest/b The user will get an invalid url page with test in bold. Or even more fun with: http://www.somecompany.com/img...
cabletron.ssr.dos.txt
Bindview Security Advisory -------- Cabletron SmartSwitch Router 8000 Firmware v2.x Issue date: November 24, 1999 Contact: Scott Blake Topic: Denial of Service Vulnerability in Cabletron's SmartSwitch Router SSR Overview: Cabletron's SSR is a Layers 2-4 routing and switching device with one of th...
CVE-1999-1549
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands...
kernel_hide.txt
Subject: EuroHaCk stealth-code fwd To: [email protected] ---------- Forwarded message ---------- Date: Wed, 18 Aug 1999 18:56:09 +0200 From: Martin Markovitz Reply-To: [email protected] To: [email protected] Subject: EuroHaCk stealth-code hi, don't think that hiding modules is an...
Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit
Exploit for solaris platform in category local exploits ================================================== Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit ================================================== cat psexpl.po psexpl.c include include include define BUFLENGTH 632 define EXTRA 256 int...
PT-1995-1003 · Washington University · Wu-Ftp Ftp Server
Name of the Vulnerable Software and Affected Versions: wu-ftp FTP server version 2.4 Description: The issue concerns certain configurations of the wu-ftp FTP server that use a PATH EXECPATH setting to a directory with dangerous commands, such as /bin. This configuration allows remote authenticate...
PT-1990-1005 · Next · Next
Name of the Vulnerable Software and Affected Versions: NeXT systems versions prior to 2.0 Description: The issue concerns the BuildDisk program, which does not prompt users for the root password on affected systems. This allows local users to gain root privileges. Recommendations: For versions...
2020-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 2004 (KB4562899)
2020-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 2004 KB4562899...
2020-07 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems (KB4568831)
2020-07 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems KB4568831...
2020-09 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems (KB4577063)
2020-09 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems KB4577063...
2021-08 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems (KB5005101)
2021-08 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems KB5005101...
2021-11 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems (KB5007253)
2021-11 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems KB5007253...
2021-01 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems (KB4598291)
2021-01 Cumulative Update Preview for Windows 10 Version 2004 for x64-based Systems KB4598291...
2021-03 Cumulative Update Preview for Windows 10 Version 2004 for x86-based Systems (KB5000842)
2021-03 Cumulative Update Preview for Windows 10 Version 2004 for x86-based Systems KB5000842...