Oracle 9i Release 2 XDB HTTP Pass Overflow

Added: 02/25/2009 CVE: CVE-2003-0727 BID: 8375 OSVDB: 2449 Background Oracle 9i release 2 includes the XDB HTTP service which by default listens on port 8080. Problem A buffer overflow vulnerability in the parsing of credentials passed to the server allows remote attackers to execute arbitrary...

Internet Explorer deleted object memory corruption

Added: 02/23/2009 CVE: CVE-2009-0075 BID: 33627 OSVDB: 51839 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A memory corruption vulnerability allows command execution when a user opens a specially crafted web page which causes a...

Internet Explorer deleted object memory corruption

Added: 02/23/2009 CVE: CVE-2009-0075 BID: 33627 OSVDB: 51839 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A memory corruption vulnerability allows command execution when a user opens a specially crafted web page which causes a...

Free Download Manager torrent file parsing buffer overflow

Added: 02/17/2009 CVE: CVE-2009-0184 BID: 33555 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability allows command execution when a user opens a torrent file containing a long file name. Resolution Upgrade to version...

Free Download Manager torrent file parsing buffer overflow

Added: 02/17/2009 CVE: CVE-2009-0184 BID: 33555 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability allows command execution when a user opens a torrent file containing a long file name. Resolution Upgrade to version...

TightVNC Authentication Failure Integer Overflow PoC

No description provided by source. !/usr/bin/env python [email protected] Modified Andres Lopez Luksenberg's exploit for Authentication Failure scenario in TightVNC. BID 33569 CVE-2009-0388 import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM serversocket.bind'', 5900...

TightVNC Authentication Failure Integer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== TightVNC Authentication Failure Integer Overflow PoC ==================================================== !/usr/bin/env python email protected Modified Andres Lopez Luksenberg's exploit for...

TightVNC - Authentication Failure Integer Overflow (PoC)

TightVNC - Authentication Failure Integer Overflow PoC !/usr/bin/env python [email protected] Modified Andres Lopez Luksenberg's exploit for Authentication Failure scenario in TightVNC. BID 33569 CVE-2009-0388 import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM...

Sun OpenSSO / Java System Access Manager Login Module User Account Enumeration Weakness

The remote host is running Sun OpenSSO, or Sun Java System Access Manager as it was previously known, an enterprise-class product that provides web access management, federation, and web services security. The version of the Login module included with Sun OpenSSO / Sun Java System Access Manager ...

TightVNC - Authentication Failure Integer Overflow (PoC)

!/usr/bin/env python [email protected] Modified Andres Lopez Luksenberg's exploit for Authentication Failure scenario in TightVNC. BID 33569 CVE-2009-0388 import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM serversocket.bind'', 5900 serversocket.listen1 while True:...

Oracle Database OLAP component ODCITABLESTART buffer overflow

Added: 02/06/2009 CVE: CVE-2008-3974 BID: 33177 OSVDB: 51347 Background The Online Analytical Processing OLAP component of Oracle Database is a set of stored procedures used for multi-dimensional analytical queries. Problem A buffer overflow vulnerability in the ODCITABLESTART function allows...

Password Door 8.4 - Local Buffer Overflow

source: https://www.securityfocus.com/bid/33634/info Password Door is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

Free Download Manager Remote Control Server HTTP Authorization buffer overflow

Added: 02/04/2009 CVE: CVE-2009-0183 BID: 33554 OSVDB: 51745 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability in the Free Download Manager Remote Control Server allows remote attackers to execute arbitrary commands...

Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities

Cisco IOS 12.423 - HTTP Server Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...

Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Sql injection

Multiple SQL injection vulnerabilities in PHP Pro Bid PPB 6.04 allow remote attackers to execute arbitrary SQL commands via the 1 orderfield and 2 ordertype parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information...

CVE-2008-6043

Multiple SQL injection vulnerabilities in PHP Pro Bid PPB 6.04 allow remote attackers to execute arbitrary SQL commands via the 1 orderfield and 2 ordertype parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information...

CVE-2008-6043

Multiple SQL injection vulnerabilities in PHP Pro Bid PPB 6.04 allow remote attackers to execute arbitrary SQL commands via the 1 orderfield and 2 ordertype parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information...

CVE-2008-6043

CVE-2008-6043 describes multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 . Remote attackers can execute arbitrary SQL commands via the order_field and order_type parameters to categories.php (and unspecified other components). The entry notes the details are partially from third-p...

PerlSoft Gästebuch 1.7b - admincenter.cgi Remote Command Execution

PerlSoft Gästebuch 1.7b - admincenter.cgi Remote Command Execution source: https://www.securityfocus.com/bid/33525/info PerlSoft Gästebuch is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize...