1st Class Mail Server 4.0 1 - Index Cross-Site Scripting

source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...

1st Class Mail Server 4.0 1 - members.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - members.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...

1st Class Mail Server 4.0 1 - Index Cross-Site Scripting

1st Class Mail Server 4.0 1 - Index Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server...

1st Class Mail Server 4.0 1 - list.tagz Cross-Site Scripting

source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...

1st Class Mail Server 4.0 1 - list.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - list.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...

1st Class Mail Server 4.0 1 - viewmail.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - viewmail.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...

1st Class Mail Server 4.0 1 - advanced.tagz Cross-Site Scripting

source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...

Norton "WrapNISUM Class" (WrapUM.dll) ActiveX control allows remote arbitrary command execution

Overview Symantec's Norton Internet Security 2004 Professional is a software package that provides antivirus, antispam, and personal firewall applications. A vulnerability in an Symantec's Norton Internet Security 2004 suite may permit a remote attacker to execute arbitrary commands on the local...

Norton AntiSpam contains boundary error within the "SymSpamHelper Class" (symspam.dll) ActiveX component.

Overview Symantec's Norton AntiSpam is a software package that provides spam filtering. A vulnerability in an ActiveX control that ships with Norton AntiSpam may permit a remote attacker to execute arbitrary code on the local system. Description Symantec Norton AntiSpam for Windows installs the...

PHP Manpage lookup directory transversal / file disclosing

Hi ppl, Manpage Lookup is a PHP class that helps you to build a "manpage" frontend in php. It is powered by Andy http://php.amnuts.com. The script class.manpagelookup.php was vulnerable to a directory transversal bug because of leaks is input validation that could lead to disclose any readable by...

manpage.txt

Hi ppl, Manpage Lookup is a PHP class that helps you to build a "manpage" frontend in php. It is powered by Andy http://php.amnuts.com. The script class.manpagelookup.php was vulnerable to a directory transversal bug because of leaks is input validation that could lead to disclose any readable by...

CVE-2003-0896

The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine JVM in Sun SDK and JRE 1.4.103 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" slash instead of "." dot characters,...

[LSD] Security vulnerability in SUN's Java Virtual Machine implementation

Hello, We have found a security vulnerability in the SUN's implementation of the Java Virtual Machine, which affects the following SDK and JRE releases: - SDK and JRE 1.4.103 and earlier - SDK and JRE 1.3.108 and earlier - SDK and JRE 1.2.2015 and earlier. SUN was informed about this issue on Jun...

JRE/JDK sandbox breaking

By using / instead of . in class name it's possible to bypass sandbox restrictions...

CVE-2003-0470

Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...

Symantec Security Check RuFSI - ActiveX Control Buffer Overflow

Symantec Security Check RuFSI - ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/8008/info It has been reported that the RuFSI Utility Class is vulnerable to a boundary condition error when invoked with long strings. This could potentially lead to the execution of code wi...

Microsoft Log Sink Class - ActiveX Control Arbitrary File Creation

Microsoft Log Sink Class - ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/12646/info Microsoft Log Sink Class ActiveX control can allow remote attackers to create arbitrary files on an affected computer. A remote attacker can exploit this issue by crafting a...

samba 2.x call_trans2open() exploit

0day is fragile! one day it's your precious, next day its worthless ... anyways i put together this SAMBAExploit class in python which might be interesting for folks since it's reusable in many other stuff ... python cause; write once a heap, stack or fmt string exploit class and the rest is just...

Lotus Notes / Lotus Domino DoS

update method of CRC32 class causes server to hang...

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service (1)

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service 1 source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occur...