ASP/ASA source using Microsoft Translate f: bug - Active Check

There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username SPDX-FileCopyrightText: 2000 Alexander Strouk Some text descriptions might be...

Apache mod_python Handle Abuse Vulnerability

Apache modpython is prone to a handle abuse vulnerability. SPDX-FileCopyrightText: 2002 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:modpython";...

SMB Registry : SQL7 Patches

The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. This problem allows an attacker who has to ability to execute SQL queries on this host to gain elevated privileges. OpenVAS Vulnerability Test $Id: smbmssql7.nasl 6056 2017-05-02...

mod_python handle abuse

The remote host is using the Apache modpython module which is version 2.7.6 or older. These versions allow a module which is indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...

YaPiG Password Protected Directory Access Flaw

The remote version of YaPiG a flaw that can let a malicious user view images in password protected directories. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Credit Card Data Disclosure in CitrusDB

CitrusDB uses a textfile to temporarily store credit card information. This textfile is located in the web tree via a static URL and thus accessible to third parties. It also isn SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are...

Microsoft SQL Server SQL Abuse Vulnerability (Q256052)

The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. SPDX-FileCopyrightText: 2001 Intranode Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse

Airscanner Mobile Security Advisory 05101001: iTunes 6.0 Shared Music Denial of Service/Spoofing/Flooding/Abuse Demo: The following is a link to a Flash demo in which we demonstrate the vulnerability. link to flash demo http://www.airscanner.com/security/itwns2.html URL:...

GTChat 0.95 Alpha - adduser Remote Denial of Service

GTChat 0.95 Alpha - adduser Remote Denial of Service Use a high user for best results. /str0ke !/usr/bin/perl codez0red by VTECin5th Feel free to modify/break this script Crappy code is more effective = I accept no responsibility for misuse or abuse Usage: xxx.pl www.server.com /directorytochat/...

[Full-disclosure] DMA[2005-0818a] - 'Apple OSX dsidentity privilege abuse'

DMA2005-0818a - 'Apple OSX dsidentity privilege abuse' Author: Kevin Finisterre Vendor: http://www.apple.com/bluetooth/ Product: 'Mac OSX 10.4' References: http://www.digitalmunition.com/DMA2005-0818a.txt http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2508...

McAfee Intrushield IPS Abuse Update is available

HI, The IntruShield Manager version 2.1.9.17 contains several updates that correct the vulnerable components that were targeted. IntruShield customers may download the new manager version from: http://www.mcafeesecurity.com/us/downloads/default.asp?wt.mcn=usupdates&wt.mct=extlicon&cid=10373 On 6...

McAfee Intrushield IPS Abuse

/ $ An open security advisory 8 - McAfee Intrushield IPS Management Console Abuse 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

backupexec_agent.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2005-0098

Multiple buffer overflows in the SDL port of abuse abuse-SDL before 2.00 allow local users to execute arbitrary code via the command line...

CVE-2005-0099

The CVE relates to the SDL port of abuse (abuse-SDL) prior to version 2.00, where privileges were not dropped before creating certain files. This allows local users to create or overwrite arbitrary files. Debian and SUSE advisories confirm the issue as CAN-2005-0099 with a local-priority impact; ...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

CVE-2005-0098

The CVE-2005-0098 entry concerns abuse, the SDL port of the Abuse game. Official advisories (CAN-2005-0098 and CAN-2005-0099) describe local, pre-2.00 buffer overflows in command-line handling that could let an attacker gain arbitrary code execution with elevated privileges, and file-creation fla...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

CVE-2005-0098

Multiple buffer overflows in the SDL port of abuse abuse-SDL before 2.00 allow local users to execute arbitrary code via the command line...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...