OpenSSH scp client unfiltered shell characters

Unsafe argument filename usage in system call...

Design/Logic Flaw

RockLiffe MailSite HTTP Mail management agent httpma 7.0.3.1 allows remote attackers to cause a denial of service CPU consumption and crash via a malformed query string containing special characters such as "|"...

CVE-2006-0342

RockLiffe MailSite HTTP Mail management agent httpma 7.0.3.1 allows remote attackers to cause a denial of service CPU consumption and crash via a malformed query string containing special characters such as "|"...

CVE-2006-0342

CVE-2006-0342 affects RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1. The flaw allows remote attackers to trigger a denial of service (CPU consumption and crash) by sending a malformed query string containing special characters such as "|". Impact is a network-accessible DoS; no e...

CVE-2006-0342

RockLiffe MailSite HTTP Mail management agent httpma 7.0.3.1 allows remote attackers to cause a denial of service CPU consumption and crash via a malformed query string containing special characters such as "|"...

Ubuntu 4.10 / 5.04 / 5.10 : mailman vulnerabilities (USN-242-1)

Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...

Design/Logic Flaw

admin.php in QualityEBiz Quality PPC QPPC 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters" to the cpage parameter...

CVE-2006-0216

admin.php in QualityEBiz Quality PPC QPPC 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters" to the cpage parameter...

CVE-2006-0216

CVE-2006-0216 affects QualityEBiz Quality PPC (QPPC) 1.0 build 1644. The admin.php cpage parameter can be exploited to reveal sensitive information, potentially the installation path, via unspecified “meta characters.” Connected records confirm the issue as a vulnerability in admin.php with a sim...

mailman mailing lists processor DoS

Scrubber.py fails to process attachment with UTF-8 character in the name and messages with large numbers in dates...

Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-139-1)

A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented 'a', a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member. Note that Tenable Network Security has...

Mandrake Linux Security Advisory : fuse (MDKSA-2005:216)

Thomas Beige found that fusermount failed to securely handle special characters specified in mount points, which could allow a local attacker to corrupt the contents of /etc/mtab by mounting over a maliciously-named directory using fusermount. This could potentially allow the attacker to set...

ImageMagic graphic utilities shell characters problem

Shell characters problem with image filenames...

The foolish old man document password full brute-force-vulnerability warning-the black bar safety net

Heard a story: one of the passengers seeing going onthe plane, and his tickets and passport to put in the Password box, but also how to remember out of the box password. And the passengers similarly, some friends needed to open a document, but forgotten when the beginning position of the password...

CVE-2005-4474

Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated usi...

CVE-2005-4474

The CVE-2005-4474 entry concerns WinRAR 3.51 with a buffer overflow in the “Add to archive” command. The described issue arises when a user is tricked into adding a file whose filename contains non-default code page and non-ANSI characters (e.g., Chinese filenames). The root cause is described as...

CVE-2005-4472

Stack-based buffer overflow in the Macromedia JRun 4 web server JWS allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters...

CVE-2005-4472

Stack-based buffer overflow in the Macromedia JRun 4 web server JWS allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters...

CVE-2005-4466

Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab...

The latest hacking techniques: the XSS cross-site scripting attack detailed description-vulnerability warning-the black bar safety net

General description A simple description of what isXSSattack How to findXSSvulnerability ForXSSattack the General idea From internal attacks: How to find the internalXSSvulnerability How to construct attack How to use The junction of any instances of attacks, such as DVBBS&BBSXP From external...