Design/Logic Flaw

Sprint Nextel Sprint voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

CVE-2007-1823

CVE-2007-1823 affects T-Mobile voice mail systems, where remote attackers can retrieve or remove messages or reconfigure mailboxes by spoofing CNID (Caller ID). The vulnerability stems from CNID-based authentication allowing remote abuse, leading to complete confidentiality, integrity, and availa...

phplistSQL.txt

----------------------------------------- PhpList Sql Injection and Path Disclosure ----------------------------------------- Vulnerabilities --------------- 1 There is an sql injection in the id parameter of publichtml/lists/admin/?page=admin&id=INJECT HERE 2 Because of the heavy use of classes...

CVE-2005-1532

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160...

Go2Call Cash Calling vulnerable

Hi, sorry fo my english. I found some bug in programm Go2Call Cash Calling It's dialer for talking from Internet Pc2Phone If you send a little UDP packets with size 1500 bytes for example 1472 chars 'A' on 5000 port then this prog will doesn't work The exploit is very easy a part of code on Delph...

Domain Name System (DNS) resolver libraries vulnerable to read buffer overflow

Overview DNS stub resolvers from multiple vendors contain a buffer overflow vulnerability. The impact of this vulnerability appears to be limited to denial of service. Description A read buffer overflow vulnerability exists in BIND 4 and BIND 8.2.x stub resolver libraries. Other resolver librarie...

Windows Unquoted Service Path Privilege Escalation

This module exploits a logic flaw due to how the lpApplicationName parameter is handled. When the lpApplicationName contains a space, the file name is ambiguous. Take this file path as example: C:\program files\hello.exe; The Windows API will try to interpret this as two possible paths:...