4818 matches found
CVE-2002-1461: Undefined Security Weakness
Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box...
PHP-Nuke 5.x6.0 - Avatar HTML Injection
PHP-Nuke 5.x6.0 - Avatar HTML Injection source: https://www.securityfocus.com/bid/6750/info A problem with PHP-Nuke could allow remote users to execute arbitrary code in the context of the web site. The problem is in the lack of sanitization of some types of input. PHP-Nuke does not sanitize code...
WU-IMAP 2000.287(1-2) - Remote Overflow
WU-IMAP 2000.2871-2 - Remote Overflow / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to thir...
Xoops topics : One more time
Hi again, I just found an other Script injection issue in Xoops Private Message Box. http://xooped-site/pmlite.php?touserid=USERIDOFTARGET&msgid=&image=fo o.gif'scriptalert"test";/scriptimg20src='http://www.isecurelabs.com /images/barre.jpg&op=submit&theme=snow&subject=Are you sure...
Microsoft Internet Explorer download dialog may not display complete filenames
Overview There is a vulnerability in the download dialog box in Internet Explorer versions 5.5 and 6.0. The vulnerability allows an attacker to mislead users, causing them to inadvertently execute arbitrary code on the user's system. Description When downloading files included in web pages, users...
CVE-1999-1097: Undefined Security Weakness
Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty...
Remote command execution via KW Whois 1.0
Greetings, There is a vulnerability in Kootenay Web Inc's KW Whois v1.0 which allows malicious users to execute commands as the uid/gid of the webserver. The hole lies in unchecked user input via an input form box. The form element input type=text name="whois" is not checked by the script for...
New Tool: initd_.sh;
/ Attachment did not send... resending sorry for the bulk / Heyas ; I wrote this tool in the last couple of days to see if I could actually implement a program that would automatically attack local binaries and attempt to find exploits in respect to buffer overflows via command line switches...
Nokia 7110 Wap Browser Hole
Ok, so this may be slighly off topic for this forum, but I though id post it anyway. The nokia 7110 wap browser will happily pass form varibles that were entered once to another site later on in the same session? Not sure how long it stores them for The problem is that the Nokia recognises forms...
CVE-1999-0592
The Logon box of a Windows NT system displays the name of the last user who logged in...
CVE-1999-0444
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...
CVE-1999-0592: Undefined Security Weakness
The Logon box of a Windows NT system displays the name of the last user who logged in...
CVE-1999-0444: Undefined Security Weakness
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...
CVE-1999-0592
The Logon box of a Windows NT system displays the name of the last user who logged in...
PT-1999-1211 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT system where the Logon box displays the name of the last user who logged in. Recommendations: At the moment, there is no information about a newer version...
OOBE ZDP
This category would be used by the updates that would meet the ZDP bar...
