6474 matches found
Design/Logic Flaw
admin.php in QualityEBiz Quality PPC QPPC 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters" to the cpage parameter...
CVE-2006-0216
CVE-2006-0216 affects QualityEBiz Quality PPC (QPPC) 1.0 build 1644. The admin.php cpage parameter can be exploited to reveal sensitive information, potentially the installation path, via unspecified “meta characters.” Connected records confirm the issue as a vulnerability in admin.php with a sim...
CVE-2006-0216
admin.php in QualityEBiz Quality PPC QPPC 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters" to the cpage parameter...
mailman mailing lists processor DoS
Scrubber.py fails to process attachment with UTF-8 character in the name and messages with large numbers in dates...
Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-139-1)
A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented 'a', a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member. Note that Tenable Network Security has...
Mandrake Linux Security Advisory : fuse (MDKSA-2005:216)
Thomas Beige found that fusermount failed to securely handle special characters specified in mount points, which could allow a local attacker to corrupt the contents of /etc/mtab by mounting over a maliciously-named directory using fusermount. This could potentially allow the attacker to set...
ImageMagic graphic utilities shell characters problem
Shell characters problem with image filenames...
The foolish old man document password full brute-force-vulnerability warning-the black bar safety net
Heard a story: one of the passengers seeing going onthe plane, and his tickets and passport to put in the Password box, but also how to remember out of the box password. And the passengers similarly, some friends needed to open a document, but forgotten when the beginning position of the password...
CVE-2005-4474
Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated usi...
CVE-2005-4474
The CVE-2005-4474 entry concerns WinRAR 3.51 with a buffer overflow in the “Add to archive” command. The described issue arises when a user is tricked into adding a file whose filename contains non-default code page and non-ANSI characters (e.g., Chinese filenames). The root cause is described as...
CVE-2005-4472
Stack-based buffer overflow in the Macromedia JRun 4 web server JWS allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters...
CVE-2005-4466
Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab...
CVE-2005-4472
Stack-based buffer overflow in the Macromedia JRun 4 web server JWS allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters...
The latest hacking techniques: the XSS cross-site scripting attack detailed description-vulnerability warning-the black bar safety net
General description A simple description of what isXSSattack How to findXSSvulnerability ForXSSattack the General idea From internal attacks: How to find the internalXSSvulnerability How to construct attack How to use The junction of any instances of attacks, such as DVBBS&BBSXP From external...
[Full-disclosure] SEC Consult SA-20051202-1 :: GMX Webmail XSS
========================================================== SEC-CONSULT Security Advisory 20051202-0 GMX / MSIE XSS ========================================================== Product: GMX Webmail V ?.? in combination with MSIE maybe other browsers Remarks: no other Versions tested but very likely...
CVE-2005-3704
CVE-2005-3704 describes a vulnerability in Mac OS X and OS X Server versions 10.4 through 10.4.3 where a remote attacker can spoof syslog messages by injecting control characters (e.g., newline) into log files. The description specifies this affects the system log server and enables manipulation ...
CVE-2005-3704
System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...
GuppY 4.5 - editorTypetool.php?meskin Traversal Arbitrary File Access
GuppY 4.5 - editorTypetool.php?meskin Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script cod...
GuppY 4.5 - archbatch.php?lng Traversal Arbitrary File Access
GuppY 4.5 - archbatch.php?lng Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that...