CVE-2007-0115

Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php...

CVE-2003-1095

BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...

HRG009.txt

HRG - Hackerlounge Research Group Release: HRG009 Monday 03/01/05 Software PBLang 4.63 delpm.php authentication problem The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and...

CVE-2005-0631

delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters...

Software PBLang 4.63 delpm.php authentication vulnerability

HRG - Hackerlounge Research Group Release: HRG009 Monday 03/01/05 Software PBLang 4.63 delpm.php authentication problem The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and...

CVE-2004-1097

Format string vulnerability in the cherokeeloggerncsawritestring function in Cherokee 0.4.17 and earlier, when authenticating via authpam, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via format string specifiers in the URL...

CVE-2004-2458

Open WebMail 2.30 and earlier, when usesyshomedir is disabled or createsyshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories...

CVE-2004-2616

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message...

CVE-2005-0068

The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using 1 blind connection-reset attacks with forged...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

Oracle 9iAS Administrative Web Interface Authentication Weakness

Binary data 1894.prm...

Courier-imap debugging format string

Pre-authentication format string bug in debugging function...

wpquiz.txt

Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...

Denial of Service in Conceptronic CADSLR1 Router

. : Shell Security Advisory : . Denial of Service in Conceptronic CADSLR1 Router ----------------------------------------------------------------------------- - 1 - Introduccin - Intro ------------------------------------------- El modelo CADSLR1 de Conceptronic es un router para ADSL con un puer...

FreeBSD : Cyrus IMAP pre-authentication heap overflow vulnerability (33)

The following package needs to be updated: cyrus %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg35f6fdf8a42511d89c6d0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

CVE-2004-0590

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS7 certificates in which a self-signed certificate identifies an alternate...

NetGear FVS318/Microsoft MN-500 Web interface DoS

Limitation for connection number prior authentication without timeouts...

[Full-Disclosure] Mdaemon 7.0.1 IMAP overflow.

Let it be known that this bug is after authentication "postauth" and therefore useless. In the current version of Mdaemon from ALTN there exists an easy to exploit, run-of-the-mill stack overflow. By authenticating and sending a large argument to the STATUS command in the IMAP component, a buffer...

DoS in NETFile FTP/Web Server

Donato Ferrante Application: Fastream NETFile FTP/Web Server http://www.fastream.com/ Version: 6.5.1.980 Bug: Denial Of Service Date: 19-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity

Device: EDIMAX AR-6004 Full Rate ADSL Router Integrated 4 port Switch Software: The Router's Server Vendor: http://www.edimax.com.tw/ Versions: AR-6004 Platforms: Windows Bug: Cross Site Scripting Vulnerabillity + Remote Compromise Risk: Medium Exploitation: Remote with browser Date: 6 Jan 2004...