Netcat 1.1 - -e Switch Remote Buffer Overflow

Netcat 1.1 - -e Switch Remote Buffer Overflow / Netcat v1.1, "-e" Switch, Remote Buffer Overflow Exploit v0.1 Homepage..........: http://www.securityfocus.com/tools/139/scoreit Affected versions.: v1.1 Fix...............: Actually none, Hobbit is warned 1 month+ ago, and looks like to not act, we...

[Full-Disclosure] sacred (pcgame) server flaw

Program: Sacred pc game http://sacred-game.com type: simple DoS, no client-auth affected version: 1.0.6.2 note: -fixed in later versions 1.0.7.0 dated:31.08.2004 -this security-lag exits for nearly half a year. although ascaron was informed at the date of release 02.03.2004, nothing happens long...

SudoEdit 1.6.8 - Local Change Permission

SudoEdit 1.6.8 - Local Change Permission / Copyright © Rosiello Security 2004 http://www.rosiello.org sudoedit Exploit SOFTWARE : sudoedit REFERENCE: http://www.sudo.ws/sudo/alerts/sudoedit.html DATE: 18/09/2004 Summary: A flaw in exists in sudo's -u option aka sudoedit in sudo version 1.6.8 that...

[vulnwatch] Titan FTP Server Long Command Heap Overflow Vulnerability

vulnwatch Titan FTP Server Long Command Heap Overflow Vulnerability www.cnhonker.com Security Advisory Advisory Name: Titan FTP Server Long Command Heap Overflow Vulnerability Release Date: 08/30/2004 Affected version: Titan FTP Server = 3.21 Author: lion [email protected] Overview: A vulnerabili...

Fusionphp Fusion News 3.33.6 - Administrator Command Execution

Fusionphp Fusion News 3.33.6 - Administrator Command Execution source: https://www.securityfocus.com/bid/10836/info It is reported that Fusion News is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to...

MyServer 0.6.2 - math_sum.mscgi Multiple Cross-Site Scripting Vulnerabilities

MyServer 0.6.2 - mathsum.mscgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a...

EasyWeb FileManager Directory Traversal

Product: EasyWeb FileManager Module - http://home.postnuke.ru/index.php Description: EasyWeb FileManager Module for PostNuke is vulnerable to a directory traversal problem which allows retrieval of arbitrary files from the remote system. Systems Affected: EasyWeb FileManager 1.0 RC-1 Technical...

mod_ssl contains a format string vulnerability in the ssl_log() function

Overview There is a format string vulnerability in the ssllog function of the modssl module that could allow an attacker to potentially execute arbitrary code. Description modssl is an Apache module that provides Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocol support...

Orenosv HTTP/FTP Server 0.5.9 - GET Denial of Service (2)

source: https://www.securityfocus.com/bid/10420/info Orenosv HTTP/FTP server is prone to a denial of service vulnerability that may occur when an overly long HTTP GET request is sent to the server. When the malicious request is handled, it is reported that both the HTTP and FTP daemons will stop...

Zen Cart login.php SQL Injection Vulnerability

Overview: "Zen Cart™ truly is the art of e-commerce; a free, user-friendly, open source shopping cart system." Description: An input validation vulnerability has been reported in Zen Cart, allowing a remote user to inject SQL commands. The '/admin/login.php' file does not properly validate...

PSR - #2004-002 Remote - LCDProc

Priv8 Security Research - 2004-001 [email protected] http://www.priv8security.com Adriano Lima February 22nd, 2004 --------------------------------------------------------------------------- Package Name: LCDProc Vendor URL: http://lcdproc.omnipotent.net Date: 2004-02-22 ID: PSR-2004-002...

Expinion.net Member Management System 2.1 - 'resend.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The problem is reported to exist in the 'ID' parameter...

Web Blog 1.1 Remote Execute Commands Bug

Product: Web Blog 1.1 Remote Execute Commands Bug Affected Versions: 1.1.5 Bug: Command Remote Execution Credits: n3rd - Lit Security Solutions LiSS Affix in irc.brasnet.org Vendor: http://leifwright.com Exploiting:...

webBlog11.txt

Product: Web Blog 1.1 Remote Execute Commands Bug Affected Versions: 1.1.5 Bug: Command Remote Execution Credits: n3rd - Lit Security Solutions LiSS Affix in irc.brasnet.org Vendor: http://leifwright.com Exploiting:...

[SCSA-025] Invision Power Board SQL Injection Vulnerability

====================================================================== Security Corporation Security Advisory SCSA-025 Invision Power Board SQL Injection Vulnerability ====================================================================== PROGRAM: Invision Power Board HOMEPAGE:...

Cross Site Scripting in VP-ASP

Advisory Name: Cross Site Scripting in VP-ASP Release Date: December 05st, 2003 Application: VP-ASP Version Affected: 4.50 Platform: ASP Severity: Low Discover: Xnuxer Research Lab. [email protected], [email protected] Vendor URL: http://www.vp-asp.com Reference: http://infosekuriti.com Proof Of...

[Full-Disclosure] ByteHoard Directory Traversal Vulnerability

ByteHoard Directory Traversal Vulnerability 17 October 2003 Original Advisory http://www.sintelli.com/adv/sa-2003-03-bytehoard.pdf Background ByteHoard is online storage system whereby users can upload and download their files from anywhere with an Internet connection. More information about the...

ZH2003-22SA (security advisory): Zorum XSS Vulnerability and Path Disclosure

ZH2003-22SA security advisory: Zorum XSS Vulnerability and Path Disclosure Published: 11 august 2003 Released: 11 august 2003 Name: Zorum Affected Systems: v.3.4 Issue: Remote attackers can inject XSS script and know the path of the site. Author: G00db0y zone-h org Vendor:...

Gkrellmd 2.1 - Remote Buffer Overflow (2)

source: https://www.securityfocus.com/bid/8022/info GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible. The issue presents itself due to a lack of sufficient bounds checking performed on network-based data. If data exceeding the maximu...

Code Injection Vulnerabilities in WebcamXP Chat Feature

=========================================================================== ==== FRAME4 SECURITY ADVISORY FSA-2003:002 --------------------------------------------------------------------------- ---- PRODUCT : WebcamXP PRODUCT/VENDOR URL : http://www.darkwet.net/ TYPE : Vulnerability / Exploit...