Memory corruption

RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service memory consumption via a certain .ra file. NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct...

CVE-2007-1264

Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message...

Fedora Core 5 : kdebase-3.5.3-0.3.fc5 (2006-726)

Thu Jun 15 2006 Than Ngo 6:3.5.3-0.3.fc5 - fix BR - Wed Jun 14 2006 Than Ngo 6:3.5.3-0.2.fc5 - apply patch to to fix 194659, CVE-2006-2449 KDM symlink attack vulnerability thanks to KDE security team - Thu Jun 8 2006 Than Ngo 6:3.5.3-0.1.fc5 - update to 3.5.3 - Fri May 12 2006 Than Ngo...

CVE-2006-4976

The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for 1 server.php, 2 adodb-errorpear.inc.php, 3 adodb-iterator.inc.php, 4 adodb-pear.inc.php, 5 adodb-perf.inc.php, 6 adodb-xmlschema.inc.php, and 7 adodb.inc.php; files ...

CVE-2006-4096

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty...

CVE-2006-4455

Removed by vendor...

CVE-2006-2920

Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character...

[Full-disclosure] sendmail stuff2

written in a rush, pardon the mess ; not that ive gotten that far but here is my confirmed by mark to be close, thanks attack.... NOTE: ive just been informed that i need to fix something to makethis work, stand by. ALSO NOTE: the default timeout in collect is 1 hour, that means this exploit will...

IHTML Merchant Mall - SQL Injection

IHTML Merchant Mall - SQL Injection source: https://www.securityfocus.com/bid/15910/info iHTML Merchant Mall is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

akfingerd

The remote finger service appears to vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not effect other services that may be running on the remote computer, only the finger service can be disrupted. akfingerd version 0.5 or earlier is...

Chipmunk Directory - 'recommend.php?entryID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

JVN#29273468 QRcode Perl CGI & PHP script vulnerable to denial of service attack

Impact A remote attacker may cause a denial of service DoS attack. Solution Products Affected QRcode Perl/CGI & PHP script ver. 0.50f and earlier including both Perl versions and PHP versions...

ht://Dig: Cross-site scripting vulnerability

Background ht://Dig is an HTTP/HTML indexing and searching system. Description Michael Krax discovered that ht://Dig fails to validate the 'config' parameter before displaying an error message containing the parameter. This flaw could allow an attacker to conduct cross-site scripting attacks...

CVE-2005-0290

NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension...

CVE-2004-1102

MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information...

CVE-2002-1336

TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users...

OverByte ICS FTP Server Remote Denial of Service Exploit

No description provided by source. --Exploit: //=========================================================== include winsock2.h include stdio.h pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD...

CVE-2004-2009

NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via 1 a direct call to mainfunctions.php, 2 an invalid jokeid parameter in a JokeView function or 3 an invalid cat parameter in a CatView function, which reveals the path in a PHP error message...

Cisco IOS 6000/6500/7600 Series Layer 2 Frame DoS (CSCdy15598, CSCeb56052)

The remote router contains a version of IOS which has multiple flaws when dealing with specially layer 2 packets. CISCO identifies this vulnerability as bug id CSCdy15598 and CSCeb56052. An attacker may use this flaw to render this router inoperable. C Tenable Network Security include"compat.inc"...

Gaim IRC Local Account Information Leakage

When logging into IRC via gaim, gaim registers the user with their valid local account id as well as the nick chosen by the end user. This is revealed when an attacker asks for information regarding the victim. Given that the host name DNS/IP is also registered, an attacker now knows both the...