ASP-Nuke RC2 存在跨站脚本(CSS/XSS)执行漏洞

BugCVE: CAN-2002-0521 BUGTRAQ: 4477 ASP-Nuke是一款基于WEB的系统架构程序，运行在多种Unix和Linux系统下，也可运行于Windows平台下。 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke中的downloads.asp和post.asp在处理用户提供的输入没有过滤相关的脚本代码，攻击者可以构建包含恶意脚本代码的内容提交给连接，当其他用户浏览相关此连接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信 ASP-Nuke RC2...

Cisco Security Advisory:Cisco Security Agent Vulnerable to Crafted IP attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================== Cisco Security Advisory: Cisco Security Agent Vulnerable to Crafted IP Attack Revision 1.0 For Public Release 2005 July 13 1600 UTC GMT...

ArGoSoft FTP Server 1.4.2.8 Buffer Overflow

-=--------------------ADVISORY-------------------=- -= =- -= ArGoSoft FTP 1.4.2.8 =- -= =- -= Author: CorryL [email protected] =- -= =- -=-------------------------------------------------------=- -=+ Application: ArGoSoft FTP Server -=+ Version: 1.4.2.8 -=+ Vendor's URL: www.argosoft.com -=+...

CProxyRemote.txt

+=========================================================================================+ | Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities | +=========================================================================================+ | [email protected]...

CIS3513.txt

-= x0n3-h4ck Italian Security Team =- /Advisories\ / Application: CIS WebServer Vendor's Url: www.cisindia.net Version: 3.5.13 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL [email protected] www.x0n3-h4ck.org \ Description CIS WebServer is an easy http server, A...

knetDoS104c.txt

-=--------------------ADVISORY-------------------=- -= =- -= Knet / include include include include include include void helpchar programname; int mainint argc, char argv struct sockaddrin trg; struct hostent he; long addr;...

SDtraverse.txt

..:x0n3-h4ck Italian Security Team:.. /Advisories\ / Application: SD Server Url Vendor: http://www.gdsoftware.dk/ Version: = 4.0.70 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL Email Author: [email protected] Url Author: www.x0n3-h4ck.org \ Description The SD...

Knet <= 1.04c Buffer Overflow Denial of Service Exploit

No description provided by source. -=--------------------ADVISORY-------------------=- -= =- -= Knet = 1.04c =- -= =- -= Author: CorryL [email protected] =- -= x0n3-h4ck.org =- -=----------------------------------------------------=- -=+ Application: Knet -=+ Version: 1.04c -=+ Vendor's URL:...

[Full-Disclosure] GAIM exploit

Platform: Windows tested only on XP and 2000, might impact others Application: GAIM v1.1.3 Synopsis: Cause remote crash of GAIM client. Scenario: By sending a file to another GAIM user, you can cause their GAIM client to crash and completely close GAIM down. Simply send a file to someone with...

arkeia_type77_win32.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

[Full-Disclosure] CIS WebServer Directory Traversal Bug

-= x0n3-h4ck Italian Security Team =- /Advisories / Application: CIS WebServer Vendor's Url: www.cisindia.net Version: 3.5.13 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL [email protected] www.x0n3-h4ck.org Description CIS WebServer is an easy http server, A...

KNet Web Server 1.04c - Buffer Overflow (Denial of Service) (PoC)

/ -=--------------------ADVISORY-------------------=- -= =- -= Knet / include include include include include include void helpchar programname; int mainint argc, char argv...

[Full-Disclosure] SD Server 4.0.70 Directory Traversal Bug

..:x0n3-h4ck Italian Security Team:.. /Advisories / Application: SD Server Url Vendor: http://www.gdsoftware.dk/ Version: = 4.0.70 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL Email Author: [email protected] Url Author: www.x0n3-h4ck.org Description The SD Serv...

[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35

Luigi Auriemma Application: Painkiller http://www.painkillergame.com Versions: = 1.35 Platforms: Windows Bug: limited buffer-overflow Exploitation: remote, versus server in-game Date: 02 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction ...

Gallery134.txt

Application: Gallery Vendors: http://gallery.sourceforge.net Versions: v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Platforms: Windows Bug: Cross Site Scripting Vulnerability Exploitation: Remote With Browser Date: 17 Jan 2005 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...

Socket unreacheable in Amp II engine

Luigi Auriemma Application: Amp II 3D engine http://www.4drulers.com/amp.html Versions: any version since there is no patch available Games: Gore: Ultimate Soldier = 1.50 ... possibly others ... Platforms: Windows Bug: socket unreacheable Exploitation: remote, versus server Date: 06 Jan 2005...

[Full-Disclosure] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: LHA File Incorrect Filename Handeling Leads to Crash/Underflow Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...

winaceHKI.txt

Application: WinAce, WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: ZIP File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1...

[Full-Disclosure] WinHKI - BH File Directory Transversal

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: BH File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1 Introduction 2 Bu...

[Full-Disclosure] WinHKI - ARC File Extraction of 1KB to 1.56GB

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: ARC File Extraction of 1KB to 1.56GB Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1 Introducti...