Unfixed XSS vulnerability at www.royalcollection.org.uk

Security researcher www.r3t.n3t.nl, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting www.royalcollection.org.uk, which at the time of submission ranked 186807 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Update Protection against Sun Microsystems Java System Web Proxy sockd Daemon Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Java System Web Proxy sockd daemon. Java System Web Proxy Server collects and distributes data from the network. It provides protocol support for SOCKS - an Internet protocol that allows client-server applications to transparently use the...

Design/Logic Flaw

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

Unfixed XSS vulnerability at www.audi-collection.com

Security researcher A.D.T, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting www.audi-collection.com, which at the time of submission ranked 900168 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2007. It is...

Default credentials

Cisco Network Services CNS NetFlow Collection Engine NFC before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system...

CVE-2007-2282

Cisco NetFlow Collection Engine (NFC) before version 6.0 is affected by a default credentials issue: the nfcuser account uses a default password, allowing remote attackers to modify NFC configuration and, on Linux, gain login access to the host OS. This is due to default accounts in NFC prior to ...

Cisco NetFlow Collection Engine contains known default passwords

Overview A vulnerability in the Cisco NetFlow Collection Engine could allow a remote attacker to gain access to a vulnerable system. Description The Cisco Network Services CNS NetFlow Collection Engine NFC is a software package for supported UNIX platforms and is used to collect and monitor NetFl...

Default Passwords in NetFlow Collection Engine

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Network Services NetFlow Collection Engine default account

Account with hardcoded password is used for NetFlow information gathering...

Cisco Security Advisory: Default Passwords in NetFlow Collection Engine

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Default Passwords in NetFlow Collection Engine Advisory ID: cisco-sa-20070425-nfc http://www.cisco.com/warp/public/707/cisco-sa-20070425-nfc.shtml Revision 1.0 For Public Release 2007 April 25 1600 UTC GMT -...

CVE-2007-1794

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805...

Design/Logic Flaw

The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805...

CVE-2007-1794

The CVE-2007-1794 entry concerns the JavaScript engine in Mozilla 1.7 and earlier on Sun Solaris (versions 8/9/10), where a garbage-collection vector may allow remote code execution by deleting a temporary object that is still in use. This is explicitly linked to CVE-2006-3805 in the description....

Ordinary file deception-vulnerability warning-the black bar safety net

Source: whytt's Blog Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS...

CVE-2007-0642

CVE-2007-0642 affects tForum 2.00 in the Raymond BERTHOU script collection (RBL - ASP). The vulnerability is an SQL injection in user_confirm.asp that allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) pass parameters. Impact is partial confidentiality, integrity, an...

Phrack55:DIG

Distributed collection of information ------- Phrack Magazine --- Vol. 9 | Issue 55 --- 09/09/99 --- 09 of 19 ------------------------- Distributed collection of information -------- hybrid ---- Review Information gathering is the process of determining the characteristics of one or more remote...

Enthrallweb eNews 1.0 - Remote User Pass Change

Enthrallweb eNews 1.0 - Remote User Pass Change User Id: PASSWORD: FIRST: LAST:...

CVE-2006-6299

Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management ZAM before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow...

CVE-2006-6299

Summary (CVE-2006-6299): A heap-based buffer overflow in Msg.dll affects Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the ZENworks Collection client. The vulnerability allows remote attackers to trigger arbitrary code execution via crafted network packets, with the Collection clie...

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability

Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across...