CVE-2003-1438

Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user...

CVE-2003-1438

BEA WebLogic Server and Express versions 5.1–7.0.0.1 are affected by a race condition in in-memory session replication or replicated stateful session beans. The same buffer may be provided to two different users, allowing one user to access another user’s session data. This CVE detail describes t...

SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-013 Advisory Title: Lotus Notes Memory Mapped Files Vulnerability Author: Ollie Whitehouse / [email protected] Release Date: 23-10-20...

elinks reveals POST data to HTTPS proxy

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy ...

security flaw

Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via 1 HTTP 302 redirect controls, 2...

emeeting-sql.txt

--==+================================================================================+==-- --==+ eMeeting Online Dating Software 5.2 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: eMeeting...

Apache mod_mem_cache information leak

Under some conditions data from previsously sent server reply headers may be leaked...

Xoops XT-Conteudo模块Spaw_Control.Class.PHP远程文件包含漏洞

Xoops XT-Conteudo是一款基于PHP的WEB应用程序。 Xoops XT-Conteudo不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'spawcontrol.class.php'脚本对用户提交的'spawroot'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Xoops XT-Conteudo Module 1.52 目前没有详细解决方案提供： http://www.xoops.org/ !/usr/bin/env python coding: utf-8 import re...

security flaw

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

security flaw

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

Ol' Bookmark Index.PHP SQL注入漏洞

Ol' Bookmark是一款基于PHP的WEB应用程序。 Ol' Bookmark不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Index.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Ol' Bookmarks 0.7.4 目前没有解决方案提供： http://olbookmarks.sourceforge.net/...

PT-2007-3718 · Yahoo · Yahoo! Ui

Name of the Vulnerable Software and Affected Versions: Yahoo! UI framework affected versions not specified Description: The issue allows remote attackers to obtain data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other...

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

Lotus Domino R6 Webmail - Remote Password Hash Dumper

Lotus Domino R6 Webmail - Remote Password Hash Dumper !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores...

CVE-2007-0251

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files...

MOTIONBORG Web Real Estate <= 2.1 SQL Injection Vulnerability

No description provided by source. Title : MOTIONBORG Web Real Estate = v2.1 Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.motionborg.com $$ : Unlimited Agents- $1,475.00 ajann SQL Injector Beta= Script Tables & Columns -dtproperties- id objectid property value...

Information leak from client application with technical information

Data leakage through service information and network protocol in the client application. When exchanging information, you are always transmitting data. However, at different levels everyone remembers ISO/OSI?, service information is added to your data. What is this information, what can it say...