security flaw

Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting XSS, and HTTP response splitting...

Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow

Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow / stetoscope.c: Dr.Web 4.33 antivirus LHA directory name heap overflow for linux - Howto: Find a valid GOT entry to hijack with objdump -R /opt/drweb/drweb . I guess that you can use the address of free, but my exploit uses the addres...

simpleblog0day.txt

| | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ ' symbol. |...

forumv04c.txt

!/usr/bin/perl Affected.scr..: µforum v0.4c Poc.ID........: 08060901 Type..........: Member's passwords are stored in .dat file no protected by a .htaccess file Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.forum.1568.html Poc.link......:...

PSWD.JS - Insecure Password Hash

/ source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers to use precomputed password hash...

Sheila unfiltered shell characters problem

Filenames shell characters problem...

GLSA-200607-04 : PostgreSQL: SQL injection

The remote host is affected by the vulnerability described in GLSA-200607-04 PostgreSQL: SQL injection PostgreSQL contains a flaw in the string parsing routines that allows certain backslash-escaped characters to be bypassed with some multibyte character encodings. This vulnerability was discover...

PostgreSQL: SQL injection

Background PostgreSQL is an open source object-relational database management system. Description PostgreSQL contains a flaw in the string parsing routines that allows certain backslash-escaped characters to be bypassed with some multibyte character encodings. This vulnerability was discovered by...

CVE-2006-3407

Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters...

CVE-2006-3407

Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters...

CVE-2006-3407

Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3231

IBM WebSphere Application Server (WAS) prior to 6.0.2.11 is affected when fileServingEnabled is true. An attacker can remotely obtain JSP source code and other sensitive information through URIs with special characters. The impact is partial confidentiality. Remediation: upgrade WAS to version 6....

CVE-2006-3231

Unspecified vulnerability in IBM WebSphere Application Server WAS before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."...

CVE-2006-3227

Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, whi...

CVE-2006-3227

CVE-2006-3227 describes an interpretation conflict between Internet Explorer and other browsers (e.g., Mozilla/Firefox/Opera) that may let remote attackers alter the visual presentation of web pages and potentially bypass protection mechanisms by using ASCII characters with the 8th bit set. IE ma...

CVE-2006-3227

Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, whi...

Yahoo! Messenger <= 7.5.0.184 Multiple Vulnerabilities

Binary data 3665.prm...

GLSA-200606-13 : MySQL: SQL Injection

The remote host is affected by the vulnerability described in GLSA-200606-13 MySQL: SQL Injection MySQL is vulnerable to an injection flaw in mysqlrealescape when used with multi-byte characters. Impact : Due to a flaw in the multi-byte character process, an attacker is still able to inject...