TurboFTP Server 5.30 Build 572 - newlineLIST Multiple Remote Denial of Service Vulnerabilities

TurboFTP Server 5.30 Build 572 - newlineLIST Multiple Remote Denial of Service Vulnerabilities / TurboFTP 5.30 Build 572 Multiple Remote DoS Several vulnerabilities have been discovered in TurboFTP 1 The app does not correctly handle reponses that contains 7000 newline chars 2 there's a heap...

BtitTracker 1.4 XSS

BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...

CVE-2006-5133

Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars."...

CVE-2006-5133

Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars."...

dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit

No description provided by source. / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly...

dSMTP Mail Server 3.1b (Linux) - Format String

dSMTP Mail Server 3.1b Linux - Format String / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a...

CVE-2001-0523

The CVE-2001-0523 entry concerns eEye SecureIIS versions 1.0.3 and earlier. Affected component: SecureIIS request filtering logic. Root cause: remote attacker can bypass filtering by escaping HTML characters within the request, enabling use of restricted variables and potential directory traversa...

bitchx.dos.txt

There's a small bug in the latest BitchX in which a nasty user can invite you to a channel with a %s in it, causing the client to coredump. As alot of channels/users on irc use the client, I felt I should post a notice about this problem. A small patch is available on www.bitchx.com/downloads.htm...