6615 matches found
jawsGlossary.txt
XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...
ekg Gadu Gadu client / libgadu multiple vulnerabilities
Symbolic links problem on temporary files creation. Unfiltered shell characters. Libgadu integer overflow. Multiple platform-specific problems...
Unfiltered shell characters in vim editor
modelines mode shell characters problem on file open...
CVE-2004-2214
The affected component is the Mbedthis AppWeb HTTP server, with versions prior to 1.1.3 vulnerable. The issue allows remote attackers to bypass access restrictions by a URI containing mixed-case characters. Remediation: upgrade to version 1.1.3 or later. No exploit details are provided in the sou...
CVE-2001-1567
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files .ntf via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by...
phpcountxss.txt
---------------------------------------------------------- ---- Team priestmasters PHP Counter 7.2 XSS Advisorie ---- ---------------------------------------------------------- PHP Counter Vendor: http://www.ekstreme.com/phplabs/phpcounter.php PHP Counter 7.2 does not filter "" tags in EpochPrefi...
FreeBSD : vim -- vulnerabilities in modeline handling (bd9fc2bf-5ffe-11d9-a11a-000a95bc6fae)
Ciaran McCreesh discovered news ways in which a VIM modeline can be used to trojan a text file. The patch by Bram Moolenaar reads : Problem: Unusual characters in an option value may cause unexpected behavior, especially for a modeline. Ciaran McCreesh Solution: Don't allow setting termcap option...
CVE-2005-2239
oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null \0 characters...
Echo Security Advisory 2005.13
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV13$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in MetaCart e-Shop ---------------------------------------------------------------------------...
Nokia / Symbian mobile phones bluetooth DoS
0x09 0x0A characters in nickname causes bluetooth device to crasg on searching...
CVE-2001-1501
The CVE-2001-1501 entry concerns ProFTPD 1.2.1 (and possibly other versions) where the globbing logic can be abused by commands containing many wildcard or special characters. Reported changes: remote attackers can trigger a denial of service through CPU and memory exhaustion by crafting commands...
CVE-2001-1497
Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password...
Enterasys Vertical Horizon switches backdoor accounts
There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...
CVE-2005-1994
Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e"...
CVE-2005-1269
Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...
CVE-2005-1269
Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...
CVE-2005-1994
Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e"...
GLSA-200506-11 : Gaim: Denial of Service vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200506-11 Gaim: Denial of Service vulnerabilities Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de Bokkenrijder...
USN-139-1: Gaim vulnerability
A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented "a", a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member...
