CVE-2003-1264

The CVE-2003-1264 issue affects the TFTP server used by Longshine WAP LCS-883R-AC-B and by the D-Link DI-614+ 2.0 based on it. The vulnerability enables remote attackers to download the configuration file (config.img) and other files without authentication, allowing access to the WEP secret and e...

CVE-2005-3555

Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the 1 editattributes or 2 admin page...

CVE-2005-3555

CVE-2005-3555 refers to multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier. The issue allows authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter on the (1) editattributes page or (2) admin page. Affected software: P...

windows NT/2k/XP useradd shellcode for russian systems 318 bytes

Exploit for win32 platform in category shellcode ================================================================ Windows NT/2k/XP useradd shellcode for russian systems 318 bytes ================================================================ / \ win32 useradd shellcode for russian systems / by...

[SA17138] BEA WebLogic 24 Vulnerabilities and Security Issues

TITLE: BEA WebLogic 24 Vulnerabilities and Security Issues SECUNIA ADVISORY ID: SA17138 VERIFY ADVISORY: http://secunia.com/advisories/17138/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data, Brute force, Exposure of system information, Exposure of...

Cyphor 0.19 SQL Injection / Board takeover / cross site scripting

Cyphor 0.19 SQL Injection / Board takeover / cross site scripting 1if magic quotes off - SQL Injection: by "Forgot your password?" feature you can send yourself a new admin password and reset it, poc: email: youremail nick: 'or'X'='X soon, you will receive an email like this: You have registered...

CVE-2005-3046

SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field...

[Full-disclosure] Multiple vulnerabilities in BFCommand & Control for Battlefield 1942 and Vietnam

Luigi Auriemma Application: BFCommand & Control Server Manager http://www.bfcommandcontrol.org Versions: BFCC = 1.22A BFVCC = 2.14B BFVCCDaemon is NOT vulnerable Platforms: Windows Bugs: A full anonymous login bypass B login bypass through NULL username C invulnerable clients and full privileges ...

CVE-2005-2596

User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries...

CVE-2005-2596

CVE-2005-2596 concerns a programming error in the Gallery component used with Postnuke that allows any user with Admin privileges to access all galleries. Open-source advisories and Debian security notes describe a remote-attack surface stemming from a bug in the gallery code that grants full gal...

CVE-2005-2596

User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries...

CVE-2005-2596

User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries...

Gallery PostNuke Integration Access Validation Privilege Escalation

The remote host is running Gallery, a web-based photo album. According to its banner, the version of Gallery installed on the remote host is subject to an access validation issue when integrated with PostNuke, as is the case on the remote host. The issue means that any user with any level of admi...

CVE-2002-2046

CVE-2002-2046 affects X-News (x_news) 1.1 and earlier. The flaw allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authenticati...

FreeBSD : Open DC Hub -- remote buffer overflow vulnerability (cdf14b68-3ff9-11d9-8405-00065be4b5b6)

Donato Ferrante reported an exploitable buffer overflow in this software package. Any user that can login with 'admin' privileges can abuse it, trough the $RedirectAll command, to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL...

[SA15600] YaPiG Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-0614

sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie...

[HSC Security Group] Comersus v6 Script injection

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Comersus v6 Shopping Cart Sever Script injection Risk: High Comersus is one of the most used Shopping Cart software written in asp, available for nix and windows platforms. A critical script injection can...

comersusv6.txt

--Alt-Boundary-27163.23868601 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Comersus v6 Shopping Cart Sever Script injection Risk: High...