7764 matches found
CVE-2006-0692: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (0-Day)
No description provided by source. / Winamp 5.12 Remote Buffer Overflow Universal Exploit Zero-Day Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan / / Tested with : Winamp 5.12 on Win XP Pro Sp2 / ...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Expl (0-Day)
Exploit for unknown platform in category remote exploits =================================================================== Winamp include define BUFLEN 0x045D define PLAYLISTFILE "crafted.pls" char szPlayListHeader1 = "playlist\r\nFile1=\\"; char szPlayListHeader2 =...
Note-A-Day-2.1.txt
New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...
CVE-2006-0404
CVE-2006-0404 affects Note-A-Day Weblog 2.2. The issue is improper access control: sensitive data stored under the web document root can be accessed via a direct request to archive/.phpass-admin, exposing encrypted passwords. This is the stated vulnerability and its impact; no explicit remediatio...
[eVuln] Note-A-Day Weblog Sensitive Information Disclosure
New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...
CVE-2006-0404: Undefined Security Weakness
Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords...
CVE-2006-0252: Undefined Security Weakness
SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the 1 year, 2 month, and 3 day parameters...
GLSA-200601-07 : ClamAV: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200601-07 ClamAV: Remote execution of arbitrary code Zero Day Initiative ZDI reported a heap buffer overflow vulnerability. The vulnerability is due to an incorrect boundary check of the user-supplied data prior to copying it to a...
[SA18379] ClamAV Unspecified UPX File Handling Vulnerability
TITLE: ClamAV Unspecified UPX File Handling Vulnerability SECUNIA ADVISORY ID: SA18379 VERIFY ADVISORY: http://secunia.com/advisories/18379/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: A...
CVE-2005-4580
Cross-site scripting XSS vulnerability in Day Communique 4 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search...
CVE-2005-4580
CVE-2005-4580 is a cross-site scripting (XSS) vulnerability in Day Communique 4. The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter used in a search. The description does not provide affected versions, root cause details beyond input reflected in the ...
CVE-2005-4580
Cross-site scripting XSS vulnerability in Day Communique 4 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search...
CVE-2005-4580: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Day Communique 4 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search...
CVE-2005-4088
SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 parent and 2 day parameters...
CVE-2005-4088: Undefined Security Weakness
SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 parent and 2 day parameters...
[Full-disclosure] ZDI-05-002: Clam Antivirus Remote Code Execution
ZDI-05-002: Clam Antivirus Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-05-002.html November 4th, 2005 -- CVE ID: CAN-2005-3303 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87 -- TippingPointTM IPS Customer Protectio...
Check for Quote of the Day (qotd) Service (UDP)
The Quote of the Day qotd service is running on this host. SPDX-FileCopyrightText: 1999 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Check for Quote of the Day (qotd) Service (TCP)
The Quote of the Day qotd service is running on this host. SPDX-FileCopyrightText: 1999 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...