1896 matches found
TREND MICRO: The Protector Becomes The Vector Take II
Monday, June 07, 2004 !-- 1. When the product alerts it creates an html file in the temporary file of the user's machine the so-called "local zone" screen shot: http://www.malware.com/weallcar.png 29KB This html file is viewed from an Internet Explorer "browser object" and indicates what file is...
Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass
source: https://www.securityfocus.com/bid/10227/info Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability. This issue is due to a race condition error that allows a malicious programmer to send SMS messages from unsuspecting cellular telephone user's telephon...
Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass
Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass source: https://www.securityfocus.com/bid/10227/info Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability. This issue is due to a race condition error that allows a malicious programmer to send...
cpanelroot.txt
Hi all when i tried to rest my pass i'm tried this url: http://cpanel.com:2082/resetpass/?user=|"ls"| it give me this / sh: line 1: /var/cpanel/users/: is a directory "sh: line 1: ls: command not found" Password Reset Resetting password for |"ls"|: A confirmation email has been sent to the email...
Microsoft Internet Explorer - URL Injection in History List (MS04-004)
Microsoft Internet Explorer - URL Injection in History List MS04-004 // Andreas Sandblad, 2004-02-03, patched by MS04-004 // Name: payload // Purpose: Run payload code called from Local Machine zone. // The code may be arbitrary such as executing shell commands. // This demo simply creates a...
Microsoft IIS 404 Response Service Pack Signature
The Patch level Service Pack of the remote IIS server appears to be lower than the current IIS service pack level. As each service pack typically contains many security patches, the server may be at risk. Note that this test makes assumptions of the remote patch level based on static return value...
Trillian 0.74 - Remote Denial of Service
Trillian 0.74 - Remote Denial of Service / -------------------------------------------- :::::::::::::::::: trillian 0.7d patch :::::Denial:of:Service::simple:exploit:: -----------------------------l0bstah----- usage :: : trillah name attacked-nick comment:: after patch .74d, exploits, wich use...
phpLinks mail() abuse Vulnerability
phpLinks mail abuse Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.destiney.com Vendor : Could not be informed Host not found Mailed advisory: 09/01/20 Vender Response : None...
Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service
Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service // source: https://www.securityfocus.com/bid/5787/info Apache is prone to a denial of service condition when an excessive amount of data is written to stderr. This condition reportedly occurs when the amount of data written to stderr is...
Cisco Secure IDS 2.03.0 Snort 1.x ISS RealSecure 56 NFR 5.0 - Encoded IIS Detection Evasion
Cisco Secure IDS 2.03.0 Snort 1.x ISS RealSecure 56 NFR 5.0 - Encoded IIS Detection Evasion source: https://www.securityfocus.com/bid/3292/info The Microsoft IIS web server supports a non-standard method of encoding web requests. Because this method is non-standard, intrusion detection systems ma...
cnn_unsubscribe_bot.txt
CNN List Un-Subscribe bot Date: 8/22/01 Author: Jay Daniels PROBLEM: Anyone can Un-Subscribe other users from CNN's distribution list by placing a random number at the end of unsubscribe cgi URL's memberid. CAUSE: There is no confirmation request! I can't remember if there is a confirmation reque...
Gene6 BPFTP Server 2.0 - File Existence Disclosure
Gene6 BPFTP Server 2.0 - File Existence Disclosure source: https://www.securityfocus.com/bid/2537/info A user can confirm the existence and location of files and directory structure information, by submitting a 'size' or 'mdtm' command of a file. If the command is carried out by the vulnerable...
Дырка в Pegasus Mail
Если ссылки mailto: обрабатываются Pegasus Mail, то с помощью подобной ссылки можно отправить любой файл с компьютера пользователя по любому адресу без подтверждения пользователем...
kde.kmail.tmp.dir.txt
Date: Wed, 9 Jun 1999 14:52:49 -0700 From: [email protected] Reply-To: X-Force To: [email protected] Subject: ISSalert: ISS Security Advisory: KDE K-Mail File Creation Vulnerability TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact...
ie4.clipboard.txt
Date: Mon, 22 Feb 1999 23:39:07 +0100 From: Juan Carlos Garcia Cuartango To: [email protected] Subject: New IE4 vulnerability : the clipboard again. Greetings, I have discovered another IE 4 clipboard vulnerability. The clipboard content can be made public by a very simple javascri...
