FloosieTek FTGate Mail Server 1.2 - Full Path Disclosure

FloosieTek FTGate Mail Server 1.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/10059/info It has been reported that FTGate it prone to a server path disclosure vulnerability. This issue is due to an ill conceived error message that includes the server path. These issues may be...

Microsoft Windows Vista - ARP Table Entries Denial of Service

Microsoft Windows Vista - ARP Table Entries Denial of Service source: https://www.securityfocus.com/bid/23266/info Microsoft Windows Vista is prone to a denial-of-service vulnerability. Remote attackers may exploit this issue by submitting malicious ARP requests to the vulnerable computer. To...

Cisco - Cisco Global er Tool

!/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main $host = ""; $expvuln = ""; $host = @ARGV 1 ...

eSignal v7 remote buffer overflow (exploit)

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 ===========-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=========== VizibleSoft Security Advisory 2004/01 25th Mar 2004 http://viziblesoft.com/insect/advisories/vz012004-esignal7.txt [email protected]...

Age of Sail II 1.04.151 - Remote Buffer Overflow

Age of Sail II 1.04.151 - Remote Buffer Overflow / by Luigi Auriemma / include include include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Bad file number"; break; case...

SureCom EP-9510AXEP-4504AX Network Device - Malformed Web Authorisation Request Denial of Service (1)

SureCom EP-9510AXEP-4504AX Network Device - Malformed Web Authorisation Request Denial of Service 1 source: https://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web...

IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9773/info It has been reported that iGeneric Free Shopping Cart is prone to a cross-site vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters Exploitation could allow for theft of cookie-based...

LGames LBreakout2 2.2.2 - Multiple Environment Variable Buffer Overflow Vulnerabilities

LGames LBreakout2 2.2.2 - Multiple Environment Variable Buffer Overflow Vulnerabilities / source: https://www.securityfocus.com/bid/9712/info Multiple buffer overflow vulnerabilities exist in the environment variable handling of LBreakout2. The issue is due to an insufficient boundary checking of...

AOL Instant Messenger 4.x5.x - Buddy Icon Predictable File Location

AOL Instant Messenger 4.x5.x - Buddy Icon Predictable File Location source: https://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks...

Vizer Web Server 1.9.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9678/info It has been reported that Vizer Web Server may be prone to a remote denial of service vulnerability that may allow an attacker to cause the affected server to crash, denying service to legitimate users. Vizer Web Server 1.9.1 has been reported t...

vBulletin 1.0/1.1/2.0.x/2.2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9649/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate cross-site scripting attacks. Upon...

mIRC 6.1 - DCC Get Dialog Denial of Service

source: https://www.securityfocus.com/bid/9492/info A vulnerability has been reported to exist in mIRC that may allow a remote attacker to crash a vulnerable mIRC client. It has been reported that the issue will present itself only in certain circumstances. Although unconfirmed, due to the nature...

McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement

McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement // source: https://www.securityfocus.com/bid/9476/info The McAfee ePolicy Orchestrator agent has been reported to a buffer management vulnerability that may be exploited to crash the affected agent. Although unconfirmed, it h...

aiptek netcam WebServer 0.93.15 - Directory Traversal

aiptek netcam WebServer 0.93.15 - Directory Traversal source: https://www.securityfocus.com/bid/9456/info It has been reported that the NETCam webserver of NETCam Viewer may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server...

Sun J2EE/RI 1.4 / Sun JDK 1.4.2 - JDBC Database Insecure Default Policy

source: https://www.securityfocus.com/bid/9444/info It has been reported that multiple JDBC database implementations include insecure default security policies. This could expose vulnerable databases to denial of service attacks. This could also permit remote attackers to execute arbitrary comman...

GoAhead Web Server 2.1.x - Directory Management Policy Bypass

source: https://www.securityfocus.com/bid/9450/info GoAhead WebServer is prone to a vulnerability that may permit remote attackers to bypass directory management policy. It is reported that certain syntax may be used in HTTP GET requests to bypass the policy for how certain request should be...

MS04-003: MDAC Buffer Overflow (832483)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can simulate responses from a SQL server. To exploit this flaw, an attacker would need to wait for a host running a vulnerable MDAC...

SnapStream PVS Lite 2.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9375/info SnapStream PVS Lite is prone to a cross-site scripting vulnerability. An attacker could exploit this issue by enticing a victim user to follow a malicious link to a system hosting the software that contains embedded HTML and script code. The...

KLA10052 DoS vulnerability in Abyss Web Server

An unspecified vulnerability was found in the Abyss Web Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to unknown vectors via a specially designed GET message. Original advisories...

BES-CMS 0.4/0.5 - 'hacking.php' File Inclusion

source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The problem exists in the...