CVE-2006-7027

Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...

Design/Logic Flaw

TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service CPU consumption via a response with a large number of newline characters...

CVE-2007-1075

TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service CPU consumption via a response with a large number of newline characters...

CVE-2007-1075

The CVE-2007-1075 entry concerns TurboFTP 5.30 Build 572. The vulnerability arises when a remote server sends a response containing a large number of newline characters, leading to CPU consumption and a denial of service. The affected component is the FTP server handling network responses; the un...

CVE-2007-1075: Undefined Security Weakness

TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service CPU consumption via a response with a large number of newline characters...

Mandrake Linux Security Advisory : libneon0.26 (MDKSA-2007:013)

An array index error in the URI parser in neon 0.26.0 to 0.26.2 could possibly allow remote malicious servers to cause a crash via a URI with non-ASCII characters. This vulnerability may only exist on 64bit systems. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...

Mozilla browsers "location.hostname" cross-domain vulnerability

Overview Mozilla-based browsers contain a cross-domain vulnerability, which may allow an attacker to access data in other sites. Description Mozilla uses a same origin security model to maintain separation between browser frames from different sources. This model is designed to prevent code in on...

Cross site scripting

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...

CVE-2007-0769

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...

XSS_Vulnerability_EasymoBlog.txt

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in "img.php" by Umberto Caldera. Discovered Date: 30/01/2007 Author: Tal Argoni talargoni at gmail d0t com Product Vendor: http://sourceforge.net/project/showfiles.php?groupid=88633 Ver: easymoblog-0.5.1 Details: EasyMoblog is...

IPSwitch WS_FTP unfilterd shell characters security vulnerability

Shell charCters problem on SCP files parsing...

Rumpus FTP server multiple security vulnerabilities

Shell characters problems, buffer overflows, weaklpermissions...

Neon LibNeon非ASCII字符URI数据远程拒绝服务漏洞

Neon LibNeon存在远程拒绝服务问题。 Neon LibNeon当处理包含非ASCII字符的URI数据时存在漏洞，攻击者可以利用漏洞使使用此库的应用程序崩溃，造成拒绝服务攻击。 Neon Client Library 0.26.2 Neon Client Library 0.26.1 Neon Client Library 0.26 MandrakeSoft Linux Mandrake 2007.0 x8664 MandrakeSoft Linux Mandrake 2007.0 Mandriva Linux可参考如下公告：...

libneon array index overflow

Index overflow on URI parsing with non-ASCII characters in 64-bit systems...

VLC Media Player 0.8.6a Unspecified Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= VLC Media Player 0.8.6a Unspecified Denial of Service Exploit ============================================================= print...

Type confusion

Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...

CVE-2007-0157

Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...

CVE-2007-0106

Cross-site scripting XSS vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when...

SOL6924 - Insertion of special characters in URL path circumvents Accessibility Scope and Access Control Lists

It is possible to bypass the Deny list, configured in the Accessibility Scope section located on the Portal Access: Web Applications: Master Group Settings page, by inserting certain special characters into a URL path. In FirePass version 6.0, this issue also applies to the Deny list configured...

SoftArtisans SAFileUp 5.0.14 - 'viewsrc.asp' Script Source Disclosure

SoftArtisans FileUp viewsrc.asp remote script source disclosure exploit Advisory Name: SoftArtisans FileUpTM viewsrc.asp remote script source disclosure exploit Tested and Confirmed Vulerable: SoftArtisans SAFileUpTM 5.0.14 Standard Severity: High Type: Script source disclosure From where: Remote...