ColdFusion Error Page XSS

Binary data 2893.prm...

CVE-2002-1642

This CVE affects PostgreSQL 7.2.1 and 7.2.2. The vulnerability arises in the VACUUM path, where local users can delete transaction log data (pg_clog), leading to a denial of service and potential data loss. The connected Red Hat/RH and NVD sources corroborate that the issue concerns local access ...

Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py

http://www.python.org/security/PSF-2005-001/ --------------------------------------------------------------------- Python Security Advisory Advisory ID: PSF-2005-001 Issue Date: February 3, 2005 Product: Python Versions: 2.2 all versions, 2.3 prior to 2.3.5, 2.4 CVE Names: CAN-2005-0089...

python -- SimpleXMLRPCServer.py allows unrestricted traversal

According to Python Security Advisory PSF-2005-001, The Python development team has discovered a flaw in the SimpleXMLRPCServer library module which can give remote attackers access to internals of the registered object or its module or possibly other modules. The flaw only affects Python XML-RPC...

[Full-Disclosure] [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RIM Blackberry buffer overflow, DoS, data loss Classification: =============== Level: low-med-HIGH-crit ID: HEXVIEW200410121 Overview: ========= RIM Blackberry is a Java-based wireless connectivity solution providing phone, e-mail, and other services ...

Engenio/LSI Logic controllers denial of service/data corruption

Product : Engenio/LSI Logic storage controllers, including: - Storagetek D280 verified, - IBM FastT 100 verified, - Probably all other Storagetek and IBM FastT storage controllers since the software part is almost identical, - Maybe some SGI and Teradata storage controllers unverified, - Some...

osTicket setup.php Accessibility

The target is running at least one instance of an improperly secured installation of osTicket and allows access to setup.php. Since that script does not require authenticated access, it is possible for an attacker to modify osTicket's configuration using a specially crafted call to setup.php to...

Sun Java Runtime Environment 1.4.x - Font Object Assertion Failure Denial of Service

Sun Java Runtime Environment 1.4.x - Font Object Assertion Failure Denial of Service source: https://www.securityfocus.com/bid/10623/info The Sun Java Runtime Environment Font object is reportedly vulnerable to an assertion failure denial of service vulnerability. This issue is due to a failure o...

PostgreSQL VACUUM command allows unprivileged user to remove database transaction log data

Overview The PostgreSQL VACUUM command contains a vulnerability that allows an unprivileged user to remove database transaction log data. This may result in unrecoverable data loss. Description PostgreSQL is a database management system. The PostgreSQL VACUUM command is used to clean out records...

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

Westpoint Security Advisory Title: VisitorBook LE Mail Relay and Cross Site Scripting Risk Rating: Moderate Software: FreeScripts VisitorBook LE Platforms: Most Unix Vendor URL: http://www.freescripts.com/ Author: Paul Johnston [email protected] Date: 10th December 2003 Advisory ID: wp-03-000...

[Full-Disclosure] Indigoperl Perledit 1.08

re: http://lists.insecure.org/lists/bugtraq/2003/Jun/0189.html still has unresolved issues with the "new" version 1.08 of Indigoperl's Perledit perledit binds to 0.0.0.0:1956 exploit c: telnet perledithost 1956 READY terminate telnet The instruction at "0x00405430" referenced memory at...

PerlEdit

------------------------------------------------------------------ - EXPL-A-2003-010 exploitlabs.com Advisory 010 ------------------------------------------------------------------ -= PerlEdit =- exploitlabs.com June 21, 2003 Vunerability: ------------- Remote Buffer Overflow Product: --------...

PalmOS ICMP flood DoS.

-BACKGROUND-: PalmOS is vulnerable to an ICMP DoS attack, when an attacker continuously sends ICMPECHO packets to the device. This attack causes 100 CPU usage, and the device therefore comes to a total lockup. The Pilot is almost instantly rendered unusable, until the attacker stops sending...

Important: Red Hat Security Advisory: : Updated PostgreSQL packages fix security issues and bugs

Updated PostgreSQL packages are available for Red Hat Linux 7.3 and 8.0. These packages correct several security and other bugs. A separate advisory deals with updated PostgreSQL packages for Red Hat Linux 6.2, 7, 7.1, and 7.2. PostgreSQL is an advanced Object-Relational database management syste...

S-plus /tmp usage

INTRODUCTION S-PLUS is a Statistical analysis, graphics and programming tool http://www.statsci.com/ http://www.insightful.com/ PROBLEM As installed on UNIX machines, Splus uses files in /tmp in an unsafe way. DETAILS The main Sqpe binary, and various shell script modules, use files in /tmp:...

CVE-2002-1642

PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log pgclog data and cause a denial of service data loss via the VACUUM command...

Microsoft Internet Explorer vulnerable to DoS via crafted ftp:// URL

Overview Microsoft Internet Explorer has a vulnerability that may cause the program to crash when opening some FTP URL's. Description Microsoft Internet Explorer with Browsing Enhancements installed by default on some versions of Windows may crash when opening an FTP URL containing '' or '&'...

XGB 1.2 - Remote Form Field Input Validation

source: https://www.securityfocus.com/bid/4515/info xGB is guestbook software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. xGB does not sufficiently validate input that is supplied via form fields. An attacker may, under some...

Security Bulletin MS02-002

---------------------------------------------------------------------- Title: Malformed Network Request can cause Office v. X for Mac to Fail Date: 06 February 2002 Software: Microsoft Office v. X for Mac Impact: Denial of Service Max Risk: Low Bulletin: MS02-002 Microsoft encourages customers to...

Problems with the scripts by Solution Scripts

!/possible/exploits/by/b0iler scripts from: http://solutionscripts.com don't take anything I say too seriously in this, as it is mostly guess work. Problems with the scripts by Solution Scripts solution script's powerlist script: It seems the author doesn't check for anything when removing user's...