2104 matches found
CVE-2007-1156
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for admin/...
CVE-2007-1156
CVE-2007-1156 affects JBrowser, where a direct request to the admin path (_admin/) allows remote attackers to bypass authentication and access administrative capabilities. The primary impact is unauthorized access to administrative functions, with the NVD entry listing a CVSS v2 base score of 7.5...
FreeBSD : snort -- DCE/RPC preprocessor vulnerability (afdf500f-c1f6-11db-95c5-000c6ec775d9)
A IBM Internet Security Systems Protection Advisory reports : Snort is vulnerable to a stack-based buffer overflow as a result of DCE/RPC reassembly. This vulnerability is in a dynamic-preprocessor enabled in the default configuration, and the configuration for this preprocessor allows for...
Hacking tips related to the HTML code of alternative application-vulnerability warning-the black bar safety net
This is a on the HTML code of the attack, although the short point home to see how that can be achieved. Now the Windows operating system is really very easy, even the formatting is using only the mouse a little bit you can, not as before to the input command to complete the grid plate. We're goi...
CVE-2007-0199: Undefined Security Weakness
The Data-link Switching DLSw feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of service device reload via "an invalid value in a DLSw message... during the capabilities exchange."...
OpenBSD 2.6 / 2.7ftpd Remote Exploit
No description provided by source. / h0h0h0 0-day k0d3z Exploit by Scrippie, help by dvorak and jimjones greets to sk8 Not fully developt exploit but it works most of the time ; Things to add: - automatic writeable directory finding - syn-scan option to do mass-scanning - worm capabilities? shoul...
JVN#52201480 Microsoft Windows Indexing Service cross-site scripting vulnerability
Impact If the Indexing Service in Internet Information Services IIS provides search capabilities, an arbitrary script could be executed on the user's web browser. Solution Products Affected Windows 2000 Windows XP Windows 2000 Server Windows Server 2003...
CVE-2006-3569
Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with...
[SECURITY] [DSA 1060-1] New kernel-patch-vserver packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 1060-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2006 http://www.debian.org/security/faq -...
Linux VServer privilege escalation
Some crytical capabilities are not limited for guest account...
Design/Logic Flaw
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-2110
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-2110
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-2110
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
Mercora IMRadio Detection
Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. OpenVAS Vulnerability Test $Id: mercoraimradioinstalled.nasl...
Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-57-1)
Paul Starzetz discovered a race condition in the ELF library and a.out binary format loaders, which can be locally exploited in several different ways to gain root privileges. CAN-2004-1235 Liang Bin found a design flaw in the capability module. After this module was loaded on demand in a running...
Mercora IMRadio Detection
Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. Josh Zlatin-Amishav GPLv2 include"compat.inc"; if description...
What A Drag
Internet Explorer supports a fantastic variety of "styles" amongst other 'unique capabilities'. A lovely demonstration of that can be found here: http://www.malware.com/wattadrag.html -- http://www.malware.com...
What A Drag II XP SP2
Internet Explorer supports a fantastic variety of "styles" and "behaviors" amongst other 'unique capabilities'. A lovely demonstration of that can be found here: http://www.malware.com/wottapoop.html -- http://www.malware.com...