6474 matches found
IPS-1 Protection Update for WWW2 (Version 27)
Microsoft IIS decodes Unicode character sets in a variety of ways. There is an uncommon way of creating Unicode characters in HTTP, which IIS but no other known web servers decode. It is in the form of percent-u-hexchar-hexchar-hexchar-hexchar. The IPS-1 WWW2 protocol subsystem has been updated t...
Code injection
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client denial of service crash via 1 a long string to the file transfer port or 2 a long chat message, or 3 a server denial of service continuous beep and slowdown via a string...
USN-497-1: xfce4-terminal vulnerability
Lasse Kärkkäinen discovered that the Xfce Terminal did not correctly escape shell meta-characters during "Open Link" actions. If a remote attacker tricked a user into opening a specially crafted URI, they could execute arbitrary commands with the user's privileges...
Xfce terminal client unescaped shell characters vulnerability
Shell characters are not filtered on URL processing...
joblister-sql.txt
JobLister3 by SkilMatch Staffing Systems, Inc. Multiple SQL injection vulnerabilities http://www.dubdubdub.com/ http://www.skilmatch.com/ The search form filed doesnt strip special characters that have special meanings. A single quote makes the application spit out a number of errors. This is not...
ContentDM Search.php XSS Vulnerability
ContentDM has a XSS vulnerability. Many .gov sites run this software. CDM fails to block special charachters etc so by searching for scriptalert'XSS';/script We can make a popup saying XSS. An attacker could steal cookies, redirect the page etc. Found by MeRhys Phillips Date found: 3rd August 200...
corehttp-overflow.txt
/ corehttpv0.5.3alpha: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xcorehttp.c -o xcorehttp syntax: ./xcorehttp -r -h host -p port corehttp homepage/url: http://corehttp.sourceforge.net/ bughttp.c:...
CoreHTTP 0.5.3alpha - HTTPd Remote Buffer Overflow
CoreHTTP 0.5.3alpha - HTTPd Remote Buffer Overflow / corehttpv0.5.3alpha: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xcorehttp.c -o xcorehttp syntax: ./xcorehttp -r -h host -p port corehttp homepage/url: http://corehttp.sourceforge.net/...
Trillian multiple security vulnerabilities
Buffer overflow and unfiltered shell characters on aim:// URL processing...
Microsoft Internet Explorer 0-day vulnerability
Unfiltered shell characters on executed URL: protocol application handler...
CVE-2007-3837
Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...
CVE-2007-3799
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...
CVE-2007-3799
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...
SquirrelMail PGP plugin unfiltered shell characters
Unfiltered shell characters on external application invocation in fpr parameter of keyringmain.php script and in different places...
TippingPoint IPS - Unicode Character Detection Bypass
TippingPoint IPS - Unicode Character Detection Bypass source: https://www.securityfocus.com/bid/24855/info TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters. A successful exploit of this issue may allow an attacker to...
TippingPoint IPS - Unicode Character Detection Bypass
source: https://www.securityfocus.com/bid/24855/info TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters. A successful exploit of this issue may allow an attacker to bypass the filter and detection system of vulnerable...
CVE-2007-3596
CVE-2007-3596 affects phpVideoPro up to version 0.8.7 (before 0.8.8). The vulnerability is in inc/vul_check.inc where the sess_id parameter accepts non‑alphanumeric characters. The impact is described as unknown (no explicit impact or attack vector details beyond a likely cross‑site scripting sug...
Fujitsu-Siemens ServerView code execution
Shell characters filtering problem in Web interface "ping" CGI script...