4807 matches found
PHP Doc System index.php show Parameter Local File Inclusion
The remote host is running PHP Doc System, a modular, PHP-based system for creating documentation. The version of PHP Doc System installed on the remote host fails to sanitize user input to the 'show' parameter of the 'index.php' script before using it in a PHP 'include' function. An...
DCP - portal XSS & SQL attacks
Web Site: http://www.dcp-portal.org/ DCP Portal = v6 This script is possibly vulnerable to SQL Injection attacks AND Cross Site Scripting XSS attacks The script has been tested with these query variables: XSS : http://target/index.php?page=send&cid=scriptalertdocument.cookie;/script XSS - only PO...
CVE-2005-2664
CVE-2005-2664 affects Whisper 32 1.16 (and possibly earlier) where passwords are stored in plaintext in memory. The underlying cause is unencrypted password storage in the process, enabling local users to read memory via a debugger or similar tool. The impact is information disclosure of password...
CVE-2005-0694
This CVE affects Hosting Controller 6.1 Hotfix 1.7 and earlier, where log files are stored under the web root. An attacker can directly request HCDiskQuotaService.csv to disclose sensitive information, specifically the list of hosted domains. The issue is an information disclosure flaw in the HCD...
CVE-2004-1709
CVE-2004-1709 concerns the Datakey Rainbow iKey2032 USB token when used with the CIP client package. The vulnerability is that communications between the token and the driver are not encrypted, which could allow local users to obtain the PINs of other users. The referenced records assign a low im...
Hydra: MS SQL
This plugin runs Hydra to find MS SQL passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...
ATA-186 Password Disclosure Vulnerability
...
[Full-Disclosure] Cross Site Java applets
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cross-Site Java breaks Sandbox Isolation for Unsigned Applets ============================================================= Product : Java Plugin Version : 1.4.201 OS : Win32 should apply for other OSs too URL : http://java.sun.com Found by : Marc...
NFS Exported Share Information Disclosure
At least one of the NFS shares exported by the remote server could be mounted by the scanning host. An attacker may be able to leverage this to read and possibly write files on remote host. Note: Shares protected by an ACL that includes the IP of the Nessus host will not be tested. C Tenable...
Cisco VPN 5000 Client Multiple Vulnerabilities
...
CGI bugs
No description provided...
KPMG-2002018: Pointsec for PalmOS PIN disclosure
-------------------------------------------------------------------- Title: Pointsec for PalmOS PIN disclosure BUG-ID: 2002018 Released: 03rd May 2002 Discovered by: Laurens Binken, KPMG IRM, the Netherlands -------------------------------------------------------------------- Problem: ========...
Security Advisory for Bugzilla v2.15 (cvs20020103) and older
All users of Bugzilla, the bug-tracking system from mozilla.org, who are using a version of Bugzilla installed from a downloaded tarball or package file are strongly recommended to update to version 2.14.1. All users of Bugzilla who are currently using version 2.15 checked out of cvs prior to 15...
Проблемы с encrypted loop device под linux (data injection)
Данные предохраняются от несанкционированного доступа, но возможно несанкционированное добавление данных...
CVE-1999-1430
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb Microsoft Access file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access...
Zope Image and File Update Data Protection Bypass
According to its banner, the remote web server is Zope 2.2.5. Such versions suffer from a security issue involving incorrect protection of a data updating method on Image and File objects. Because the method is not correctly protected, it is possible for users with DTML editing privileges to upda...
ISS SAVANT Advisory 00/26
Internet Security Systems SAVANT Windows 2000 Advisory No: 00/26 Dated: 10 May 2000 Platforms Affected: Windows 2000 Server Windows 2000 Professional Subject: Default configuration of SYSKEY permits compromise of Encrypting File System Summary: The Encrypting File System EFS permits files and...
hotmail.passwd.trap.txt
Date: Fri, 23 Apr 1999 13:55:24 -0500 From: David L. Nicol To: [email protected] Subject: javascript hotmail password trap Hello, I was informed this morning that a free form data mailer I maintain http://www.tipjar.com/generic.html was being involved in a javascript-based hotmail password...
ms-frame-spoof.txt
From: Microsoft Product Security Notification Service mailto:[email protected] On Behalf Of Microsoft Product Security Sent: Wednesday, December 23, 1998 9:51 AM To: [email protected] Subject: Microsoft Security Bulletin MS98-020 The following is a...
