Multiple sql injection, and xss vulnerabilities in Pay pal Storefront

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple sql injection, and xss vulnerabilities in Pay pal Storefront Date: March 25, 2005 Summary: There are multiple sql injection, xss vulnerabilities in the Pay pal Storefront...

CVE-2004-2638

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the inlogin parameter to a non-zero value...

CVE-2002-1139: Undefined Security Weakness

The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target...

Microsoft Windows XP2000 - TCP Connection Reset

Microsoft Windows XP2000 - TCP Connection Reset AFX TCP Reset by Aphex http://www.iamaphex.cjb.net [email protected] Compile with Delphi 5/6/7 program Project1; $APPTYPE CONSOLE uses Windows; type TBufferArray = array0..65535 of byte; type iph = record ipverlen: byte; iptos: byte; iplen: word;...

FirstClass Desktop 7.1 - Local Buffer Overflow

/ ++++++++++++++++++++++++++++++++++++++++++++++++++++ FirstClass Desktop 7.1 latest buffer overflow exploit Discovered and coded by I2S-LaB. URL : http://www.I2S-LaB.com contact : contactatI2S-LaB.com ++++++++++++++++++++++++++++++++++++++++++++++++++++ Compile it with cl.exe VC++6 / include voi...

CVE-2001-1293: Undefined Security Weakness

Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB 3CR29223 allows remote attackers to cause a denial of service crash via a long HTTP request...

Microsoft Windows - Users Information : Passwords Never Expire

Using the supplied credentials, Nessus was able to list users that are enabled and whose passwords never expire. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10900; scriptversion"1.22"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows ...

valueclick-cgi.txt

Date: Sat, 19 Dec 1998 17:19:34 +0200 From: Philip Stoev Reply-To: Bugtraq List To: [email protected] Subject: ValueClick CGI Vulnerability The following text is in the "KOI8-R" character set. Your display is set for the "US-ASCII" character set. Some characters may be displayed incorrectly. T...

Security Update for Exchange 2000 Server (KB906780)

A security issue has been identified that could affect your Exchange 2000 Server system in the following way: 1. Denial of Service 2. Elevation of Privilege 3.Tampering with Data 4. Information Disclosure . We recommend that you install this update on all Microsoft Exchange 2000 servers in your...

Microsoft Application Virtualization 4.6 Service Pack 3 (KB2873450)

Application Virtualization App-V 4.6 Service Pack 3 provides new platform support for Windows 8.1 and Windows Server 2012 R2. This service pack also provides the latest security and stability enhancements to help keep computers running App-V up-to-date, reliable, and more secure. The goal of this...