485 matches found
CYBSEC Security Pre-Advisory: SAP RFC_START_GUI RFC Function Buffer Overflow
The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisorySAPRFCSTARTGUIRFCFunctionBufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP RFCSTARTGUI RFC Function Buffer Overflow ================== Vulnerability...
PT-2005-2861 · Jiro · Jiro'S Upload System
Name of the Vulnerable Software and Affected Versions: JiRo's Upload System JUS version 1 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the password parameter in the login.asp file. Recommendations: For JiRo's Upload System JUS version 1, avoid...
e-Post SPA-PRO 4.01 - 'imap' Remote Buffer Overflow
// // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer Overflow // Vulnerability // // Bind Shell POC Exploit for Japanese Win2K SP4 // 31 May 2005 // // This POC code binds shell on port 2001 of a vulnerable e-Post // SPA-PRO Mail @Solomon IMAP server. // // This POC assumes default...
GLSA-200406-09 : Horde-Chora: Remote code execution
The remote host is affected by the vulnerability described in GLSA-200406-09 Horde-Chora: Remote code execution A vulnerability in the diff viewer of Chora allows an attacker to inject shellcode. An attacker can exploit PHP's file upload functionality to upload a malicious binary to a vulnerable...
Microsoft Security Bulletin MS04-023
Microsoft Security Bulletin MS04-023 Vulnerability in HTML Help Could Allow Code Execution 840315 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
Remote DoS in Desktop Orbiter
SUMMARY: Desktop Orbiter www.anfibia.it is a client-server application that allow you to administer and secure your network. VULNERABILITY DESCRIPTION: At every connection to port 51054of the server, a snapshot preview of the desktop is loaded in memory; by creating many connections to this port ...
SRT2003-04-04-1106 - AOLServer Proxy Daemon API unformatted syslog() call
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
CORE-20020409: Multiple vulnerabilities in stack smashing protection technologies
CORE SECURITY TECHNOLOGIES Advisory http://www.corest.com Multiple vulnerabilities in stack smashing protection technologies Date Published: 2002-04-23 Last Update: 2002-04-23 Advisory ID: CORE-20020409 Bugtraq ID: Non-assigned yet CVE CAN: Non-assigned yet Title: Multiple vulnerabilities in stac...
PhpSmsSend remote execute commands bug
--- PhpSmsSend remote execute commands bug --- About PhpSmsSend PhpSmsSend is a frontend to the SmsSend application. It consists of a .php file, from which you select one of the available scripts, and then you can send an SMS wherever you want, all around the world. PhpSmssend's website is...
KLA10124 ACE vulnerability in Compaq
A buffer overflow was found in Compaq products. By exploiting this vulnerability malicious users can execute arbitrary programs. This vulnerability can be exploited from the network at a point related to web login via a specially designed user name. Original advisories Compaq bulletin Exploitatio...
rightfax.txt
LoWNOISE Colombia 2000 +---RightFax Web Client v5.2: Hijack user's sessions +---Description Using your web browser When you click to log on to the rightfax server, it opens a new window. In that window you are asked for a username and password. The Toolbar on the browser is hidden, but if you ope...
