7163 matches found
security flaw
The sysaddkey function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service OOPS via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the...
PT-2006-3506 · Sitecom · Sitecom Wl-153
Name of the Vulnerable Software and Affected Versions: Sitecom WL-153 router firmware versions prior to 1.38 Description: The issue allows remote attackers to bypass access restrictions and conduct unauthorized operations. This is achieved via a UPnP request with a modified InternalClient...
XSS in Firepass 4100 SSL VPN v.5.4.2 (and probably others)
Vulnerability class : Cross-Site Scripting Discovery date : 2nd of February 2006 Remote : Yes Local : No Credit : ILION Research Labs, Geneva Switzerland Vulnerable : F5 Firepass 4100 SSL VPN v. 5.4.2 A XSS Cross-Site-Scripting vulnerability has been uncovered in my.support.php3 called through a...
USN-231-1: Linux kernel vulnerabilities
Rudolf Polzer reported an abuse of the 'loadkeys' command. By redefining one or more keys and tricking another user like root into logging in on a text console and typing something that involves the redefined keys, a local user could cause execution of arbitrary commands with the privileges of th...
th_mailformplus
A weakness in the form validation of thmailformplus has been discovered that may be abused to inject additional recipients in mail forms. Component Type: Third Party Extension. This extension is third party code that has not been submitted to the TYPO3 extension review process yet. The extension ...
PHPix directory traversal vulnerability
PHPix program allows an attacker to read arbitrary files on the remote web server, prefixing the pathname of the file with ..%2F..%2F.. Example: GET /Album/?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0 will return all the files that are nested within /etc...
ASP/ASA source using Microsoft Translate f: bug - Active Check
There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username SPDX-FileCopyrightText: 2000 Alexander Strouk Some text descriptions might be...
Apache mod_python Handle Abuse Vulnerability
Apache modpython is prone to a handle abuse vulnerability. SPDX-FileCopyrightText: 2002 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:modpython";...
mod_python handle abuse
The remote host is using the Apache modpython module which is version 2.7.6 or older. These versions allow a module which is indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...
SMB Registry : SQL7 Patches
The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. This problem allows an attacker who has to ability to execute SQL queries on this host to gain elevated privileges. OpenVAS Vulnerability Test $Id: smbmssql7.nasl 6056 2017-05-02...
Microsoft SQL Server SQL Abuse Vulnerability (Q256052)
The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. SPDX-FileCopyrightText: 2001 Intranode Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
YaPiG Password Protected Directory Access Flaw
The remote version of YaPiG a flaw that can let a malicious user view images in password protected directories. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Credit Card Data Disclosure in CitrusDB
CitrusDB uses a textfile to temporarily store credit card information. This textfile is located in the web tree via a static URL and thus accessible to third parties. It also isn SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are...
Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse
Airscanner Mobile Security Advisory 05101001: iTunes 6.0 Shared Music Denial of Service/Spoofing/Flooding/Abuse Demo: The following is a link to a Flash demo in which we demonstrate the vulnerability. link to flash demo http://www.airscanner.com/security/itwns2.html URL:...
GTChat 0.95 Alpha - adduser Remote Denial of Service
GTChat 0.95 Alpha - adduser Remote Denial of Service Use a high user for best results. /str0ke !/usr/bin/perl codez0red by VTECin5th Feel free to modify/break this script Crappy code is more effective = I accept no responsibility for misuse or abuse Usage: xxx.pl www.server.com /directorytochat/...
[Full-disclosure] DMA[2005-0818a] - 'Apple OSX dsidentity privilege abuse'
DMA2005-0818a - 'Apple OSX dsidentity privilege abuse' Author: Kevin Finisterre Vendor: http://www.apple.com/bluetooth/ Product: 'Mac OSX 10.4' References: http://www.digitalmunition.com/DMA2005-0818a.txt http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2508...
McAfee Intrushield IPS Abuse Update is available
HI, The IntruShield Manager version 2.1.9.17 contains several updates that correct the vulnerable components that were targeted. IntruShield customers may download the new manager version from: http://www.mcafeesecurity.com/us/downloads/default.asp?wt.mcn=usupdates&wt.mct=extlicon&cid=10373 On 6...
McAfee Intrushield IPS Abuse
/ $ An open security advisory 8 - McAfee Intrushield IPS Management Console Abuse 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...
backupexec_agent.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
