123 Flash Chat 5.0 - Remote Code Injection

source: https://www.securityfocus.com/bid/16360/info 123 Flash Chat is prone to an arbitrary code injection weakness. An attacker can influence the value of a variable that is insecurely passed to an 'eval' call. Successful exploitation may allow attackers to take complete control of the...

Cray UNICOS usrbinscript - Command Line Argument Local Overflow

Cray UNICOS usrbinscript - Command Line Argument Local Overflow source: https://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities wi...

CVE-2005-4674

Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the 1 c or 2 s parameter...

CVE-2005-4675

Cross-site scripting XSS vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Multiple security vulnerabilities have been found in Thintune, one of them is a backdoor password SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Sun JavaServer Default Admin Password (HTTP)

This host is running the Sun JavaServer. This server has the default username and password of admin. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft COM+ contains a memory management flaw

Overview Microsoft COM+ contains a vulnerability due to a memory management flaw that may allow an attacker to take complete control of an affected system. Description Microsoft gives the following definition of COM+: COM+ is the next step in the evolution of the Microsoft Component Object Model...

phpCounter.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 001 ------------------------------------------------------ Date - 10/2005 Complete PHP Counter Multiple Vulnerability AFFECTED PRODUCTS ================= Complete PHP Counter http://www.dotcombuilder.com OVERVIEW...

MS Windows Plug-and-Play Service Remote Universal Expl (MS05-039)

Exploit for unknown platform in category remote exploits ==================================================================== MS Windows Plug-and-Play Service Remote Universal Exploit MS05-039 ==================================================================== / HOD-ms05039-pnp-expl.c: 2005-08-1...

ECI Telecom B-FOCuS Router 312+ - Unauthorized Access

ECI Telecom B-FOCuS Router 312+ - Unauthorized Access source: https://www.securityfocus.com/bid/14364/info B-FOCuS Router 312+ is affected by a vulnerability that can allow unauthorized attackers to gain access to an affected device. An attacker can disclose the administrator password through the...

ECI Telecom B-FOCuS Router 312+ - Unauthorized Access

source: https://www.securityfocus.com/bid/14364/info B-FOCuS Router 312+ is affected by a vulnerability that can allow unauthorized attackers to gain access to an affected device. An attacker can disclose the administrator password through the Web interface of the device. This can lead to a...

osCommerce Unprotected Admin Directory

The installation of osCommerce on the remote host apparently lets anyone access the application's admin directory, which means that they have complete administrative access to the site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

APG Technology ClassMaster - Unauthorized Folder Access

source: https://www.securityfocus.com/bid/13604/info ClassMaster is reportedly affected by a vulnerability that may allow attackers to gain unauthorized access to users' folders. An attacker is able to gain complete access to user shares over a network without providing any sort of authentication...

Microsoft font processing buffer overflow vulnerability

Overview A privilege elevation vulnerability exists in the way that Microsoft Windows processes certain fonts. This vulnerability could allow a logged on user to take complete control of the system. Description Due to an unchecked buffer in the processing of malicious fonts, a locally authenticat...

Microsoft Internet Explorer - .ANI Universal (MS05-002)

Microsoft Internet Explorer - .ANI Universal MS05-002 / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit CAN-2004-1049 .:: houseofdabus ::. universal -- for all affected...

[ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing

Gentoo Linux Security Advisory GLSA 200501-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Important: Red Hat Security Advisory: samba security update

Updated samba packages that fix an integer overflow vulnerability are now available for Red Hat Enterprise Linux 2.1. Samba provides file and printer sharing services to SMB/CIFS clients. Greg MacManus of iDEFENSE Labs discovered an integer overflow bug in Samba versions prior to 3.0.10. An...

Critical Vulnerability in Altiris Deployment Server architecture

Subject: Design flaw in Altiris Deployment Server - Attacker can take over all clients on a network with Admininstrator Rights and Remote Control ability PRODUCTS AFFECTED: --------------------------------------------------------------------------------------------- ALTIRIS DEPLOYMENT SERVER - 5....

Netgear WG602 Accesspoint vulnerability

KHAMSIN Security News KSN Reference: 2004-06-03 0001 TIP --------------------------------------------------------------------------- Title ----- The Netgear WG602 Accesspoint contains an undocumented administrative account. Date ---- 2004-06-03 Description ----------- The webinterface which is...

ISS Security Brief: Multiple Vulnerabilities in Microsoft RPC Service

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief September 10, 2003 Multiple Vulnerabilities in Microsoft RPC Service Synopsis: Microsoft has released a security bulletin MS03-039 detailing three distinct vulnerabilities in the Windows RPC Remote Procedure Call...