&RQ DoS bug

===RUS При длинном запросе на авторизацию старого образца &RQ любой версии выдает много ошибок, в некоторых случаях требуется переустановка клиента. После разговора с Rejetto, он прислал файл конфигурации, который закрывает эту брешь. icq 7000000 [email protected] с уважением, RdM-YanDeX ===ENG...

PhpBB HTTP Response Splitting & Cross Site Scripting vulnerabilities

///////////////////////////////////////////////////////////////////// //=================== Security Advisory =======================// ///////////////////////////////////////////////////////////////////// --------------------------------------------------------------------- --- PhpBB HTTP Respon...

US Robotics Broadband Router 8003 unauthorized access

Password is checked on client side...

Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001

-- Security Advisory -- Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 -- Author: Ory Segal , Sanctum inc. http://www.SanctumInc.com -- Release Date: April 5th. 2004 -- Product: Microsoft SharePoint Portal Server 2001 -- Severity: High -- CVE: CAN-2004-0379 -- Description...

Cross Site Scripting in VBulletin forum software

Client side execution of malicious scripts cross-site scripting Test Impact Customer session and cookies may be compromised. The attacker may be able to pose as a legitimate user to view and alter user records, and perform transactions as that user. From the polarised perspective, a user may only...

Epic 1.0.1/1.0.x - CTCP Nickname Server Message Buffer Overrun

// source: https://www.securityfocus.com/bid/8999/info A remotely exploitable buffer overrun has been reported in Epic. This issue may reportedly be exploited by a malicious server that supplies an overly long nickname in a CTCP messages, potentially allowing for execution of arbitrary code in th...

mpg123[v0.59r,v0.59s]: remote client-side heap corruption exploit.

did an audit of mpg123my mp3 player of choice, found a remotely exploitable bug in audio streaming servicehttpget.c; applies to v0.59r and v0.59spre, up to current as of writing this. the exploit comments explain how it works and how to find the memory addresses neededif not already a target valu...

PBLang Forum XSS Vul

PBLang is a web forum written by PHP language. A security vulnerability in the product allows posting of HTML code and JavaScript into existing web pages thus causing it to be executed on the client end a Cross-Site Scripting vuln. |--------------------------------------------| Vulnerable systems...

cPanel Malicious HTML Tags Injection Vulnerability

------------------------------------------------------------------------------- ----- cPanel Malicious HTML Tags Injection Vulnerability ------------------------------------------------------------------------------- -- Author: Ory Segal, Sanctum inc. http://www.SanctumInc.com -- Discovery Date:...

WebBBS Guestbook : Cross Site Scripting

WebBBS Guestbook : Cross Site Scripting Program : WebBBS Url vendor : http://awsd.com/scripts/webbbs/ Problem : Multiple Cross Site Scripting Vulnerabilities Author : Thierry LAVIE [email protected] Www : www.lavieangel.com DESCRIPTION : WebBBS is, as the name implies, a Web-based bulletin...

IBM Tivoli Firewall Security Toolbox buffer overflow

Buffer overflow from client side...

shopfactory shopping cart

Security advisory Issue: Shopfactory e-commerce application allows alteration of order details Date: 03/05/03 Vendor first notified: December 2002 Affected versions: All available versions current version Shopfactory 5.8 ABOUT SHOPFACTORY: Shopfactory is a shopping cart solution. According to the...

CVE-2002-2303

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data...

Poisonous Style for Dialog window turns the zone off.

Poisonous Style for Dialog window turns the zone off. "that's all" is the end of file if you are in a hurry tested MSIEv6CN version Patch: Q312461,Q328790MS02-066 IEXPLORE.EXE file version: 6.0.2600.0000 MSHTML.DLL file version: 6.00.2600.0000 demo at...

Working Resources BadBlue 1.7.3 - 'cleanSearchString()' Cross-Site Scripting

source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web interface, generated by an included web server running on the local...

Working Resources BadBlue 1.7.3 - cleanSearchString() Cross-Site Scripting

Working Resources BadBlue 1.7.3 - cleanSearchString Cross-Site Scripting source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web...

Checkpoint FW1 SecuRemote/SecureClient "re-authentication" (client side hacks of users.C)

Affected products : All versions of Checkpoint FW1 when used with SecuRemote/SecureClient Namely 4.0, 4.1 at any SP level, and NG FP1 http://www.checkpoint.com/products/security/vpn-1clients.html Description : Checkpoint Firewall-1 SecuRemote/SecureClient "authentication timeout" defined in FW1's...

tdforum 1.2 Messageboard

Examination of the program "TDForum 1.2", a guest book style, unthreaded messageboard, for sale at http://www.tdscripts.com http://www.tdavidscripts.com/ aliases the same, revealed a serious client-side security risk to the users of the forum. Because user supplied data is not being sanitized,...

FreeBSD-SA-00:72.curl

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:72 Security Advisory FreeBSD, Inc. Topic: curl client-side vulnerability Category: ports Module: curl Announced: 2000-11-20 Credits: Wichert Akkerman Affects: Ports...

Weblogic 3.1.84.0.44.5.1 - Remote Command Execution

Weblogic 3.1.84.0.44.5.1 - Remote Command Execution source: https://www.securityfocus.com/bid/1525/info In February of 2000 CERT Coordination Center released an advisory titled "Malicious HTML Tags Embedded in Client Web Requests" advisory attached in 'Credit' section". This advisory was a joint...