717 matches found
CVE-2003-1516
The CVE-2003-1516 entry concerns the org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01. The flaw allows signed and unsigned applets to share variables, violating the Java security model and potentially enabling remote attackers to read or write data belonging to a sign...
CVE-2007-1167
CVE-2007-1167 affects deV!L`z Clanportal (DZCP) prior to or including 1.4.5. The issue resides in inc/filebrowser/browser.php, where an attacker can trigger information disclosure by using the inc/mysql.php value of the file parameter, allowing remote retrieval of MySQL data. This is a remote, un...
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion
source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Uploader <= (userdata/user_1.txt) Password Disclosure Vulnerability
Uploader = userdata/user1.txt Password Disclosure Vulnerability Script: Uploader Version: 6 Beta 1 Dork: "Uploader Version 6 Beta 1" Found By : BorN To K!LL Explo!T:. ^^^^^ www.site.com/upload-path/userdata/user1.txt as We see Admin name & Hash ..... crack the password .... : GreeTz To : Dr.2 ,...
ackerTodo42.txt
ackerTodo 4.2 SQL Injection vendor: http://ackertodo.sourceforge.net/site2/index.html File: gadget/login.php Exploiting this issue could allow an attacker to access sensible data. Vuln code: $userlogin = trim$REQUEST'uplogin'; $userpass = trim$REQUEST'uppass'; $numtasks = trim$REQUEST'upnumtasks'...
CVE-2006-3740
The CVE-2006-3740 entry concerns an integer overflow in X.Org 6.8.2’s scan_cidfont handling and the XFree86 X server, triggered by crafted CMap/CIDFont font data with manipulated item counts in begincodespacerange, cidrange, or notdefrange sections. Impact is local code execution or denial of ser...
Mailman < 2.1.9rc1 Spoofed Log Entry Injection
Binary data 3737.prm...
[Full-disclosure] Session data pollution vulnerabilities in web applications
In web applications I've tested recently I have stumbled upon something that seems to be new class of bugs. Quick googling did not turn up any reference to this kind of vulnerabilities, so I thought I should describe it. The problem boils down to the application reusing the same session variable...
phpBB < 2.0.16 viewtopic.php Arbitrary Code Execution
Binary data 3038.prm...
Freeciv Server 2.0.0beta8 - Denial of Service
!/usr/bin/perl Freeciv Server \n"; exit1; system "clear"; $server = $ARGV0; print "- Freeciv DoS Exploit\n\n"; print "- Server IP: "; print $server; print "\n- Connecting to IP ...\n"; $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$server", PeerPort = "5555"; unless $socket die "-...
ArGoSoft FTP Server DELE Buffer Overflow
Binary data 2684.prm...
RealPlayer < 6.0.12.1059 Multiple Remote Overflows
Binary data 2666.prm...
Avaya IP Office Phone Manager - Local Password Disclosure
Avaya IP Office Phone Manager - Local Password Disclosure include include include / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as a...
Sami HTTP Server v1.0.5 Remote Overflow
Binary data 2620.prm...
Alt-N MDaemon File Creation Local Privilege Escalation
Binary data 2430.prm...
WebGUI < 6.2.9 Unspecified Vulnerability
Binary data 2414.prm...
Mozilla Firefox < 1.0.0 IMG Tag Multiple Vulnerabilities (deprecated)
Binary data 2402.prm...
Pigeon Server 3.02.0143 - Denial of Service
/ by Luigi Auriemma / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1" define PORT 3103 define BUFFSZ 8192 // we need at least 8180 'a's ulong resolvchar host; void stderrvoid; int...