Stompy (the session stomper) Vulnerability Scanner Detection

Binary data 3895.prm...

CVE-2007-0120

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

Acunetix WVS <= 4.0 20060717 HTTP Sniffer Component Remote DoS

Exploit for unknown platform in category dos / poc ============================================================== Acunetix WVS = 4.0 20060717 HTTP Sniffer Component Remote DoS ============================================================== !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 =...

Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service

Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 = Build 20060717 HTTP Sniffer component Remote Denial of Service Explaination: I found a DoS in Acunetix WVS doing a little bit of fuzzing. The flaw is triggered wh...

Ultimate PHP Board chat/login.php username Parameter Script Injection

Binary data 3872.prm...

FreeBSD : drupal -- multiple XSS vulnerabilities (b2383758-5f15-11db-ae08-0008743bf21a)

The Drupal Team reports : A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS attack via a specially crafted RSS feed. This...

SiVus VOIP Vulnerability Scanner Detection (deprecated)

Binary data 3761.prm...

Sipsak VOIP Vulnerability Scanner Detection (deprecated)

Binary data 3765.prm...

SquirrelMail < 1.4.8 Local File Inclusion

Binary data 3639.prm...

Resin < 3.0.19 Directory Traversal and Path Disclosure Vulnerabilities

Binary data 3621.prm...

PHP-Fusion < 6.00.307 Local File Inclusion

Binary data 3560.prm...

phpListPro Multiple Script returnpath Parameter Remote File Inclusions

The remote host is running phpListPro, a website voting/ranking tool written in PHP. The installed version of phpListPro fails to sanitize user input to the 'returnpath' parameter of the 'config.php', 'editsite.php', 'addsite.php', and 'in.php' scripts before using it to include PHP code from oth...

Listserv < 14.5 Multiple Buffer Overflows

Binary data 3458.prm...

MyBB < 1.04 misc.php SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the comma variable via the 'comma' parameter in a cookie. If PHP's 'registerglobals' setting is enabled, a remote, unauthenticated attacker can...

GLSA-200511-12 : Scorched 3D: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-12 Scorched 3D: Multiple vulnerabilities Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several buffer overflows. Impact : A remote attacker can exploit...

Acunetix Web Vulnerability Scanner Detection

Binary data 3298.prm...

Buffer Overrun In HTML Converter Could Allow Code Execution (823559)

There is a flaw in the way the HTML converter for Microsoft Windows handles a conversion request during a cut-and-paste operation. This flaw causes a security vulnerability to exist. A specially crafted request to the HTML converter could cause the converter to fail in such a way that it could...

cybsecApps.txt

CYBSEC S.A. www.cybsec.com Advisory Name: Multiple Vendor Web Vulnerability Scanner Arbitrary ============= Script Injection Vulnerability Vulnerability Class: Script Injection ==================== Release Date: 09.01.2005 ============= Affected Applications: ====================== N-Stealth...

CYBSEC - Multiple Vendor Web Vulnerability Scanner Arbitrary Script Injection Vulnerability

CYBSEC S.A. www.cybsec.com Advisory Name: Multiple Vendor Web Vulnerability Scanner Arbitrary ============= Script Injection Vulnerability Vulnerability Class: Script Injection ==================== Release Date: 09.01.2005 ============= Affected Applications: ====================== N-Stealth...

e107 0.6 forum_post.php create new topics in non-existing forums

Hello, The e107 is an open-source, PHP and SQL based portal and content management system1. The user Tron2 of my website3 has detected an issue in forumpost.php. If you want to create a new topic you will get to forumpost.php?nt.13 where an integer the id of the forum represents. Because there is...