CVE-2003-0857

The 1 ipqread and 2 ipulogread functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

CVE-2003-1354

The CVE-2003-1354 issue concerns GameSpy 3D 2.62–compatible gaming servers that respond with very large UDP packets to tiny requests, enabling remote attackers to use these servers as an amplification vector for DDoS attacks with spoofed UDP query packets (illustrated by Battlefield 1942). The vu...

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

KwsPHP Module jeuxflash 1.0 (id) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork :...

Unwanted Access to File System via Import Pages Functionality

security vulnerability found in Confluence 2.5.6 Space administrator can use the "Import Pages from Disk" feature to browse the server file system by pointing the importer at "/" folder or any other folder. Because this folder doesn't contain expected files, an error message is displayed,...

Unwanted Access to File System via Import Pages Functionality

security vulnerability found in Confluence 2.5.6 Space administrator can use the "Import Pages from Disk" feature to browse the server file system by pointing the importer at "/" folder or any other folder. Because this folder doesn't contain expected files, an error message is displayed,...

[Full-disclosure] POWER PHLOGGER v.2.2.5 (username) SQL Injection

POWER PHLOGGER v.2.2.5 username SQL Injection Author: Attila Gerendi Darkz Date: June 25, 2007 Package: POWER PHLOGGER http://www.phpee.com/ Versions Affected: v.2.2.5 Other versions may also be affected Severity: SQL Injection Description: Input passed to the "username" parameter in "login.php"...

POWER PHLOGGER v.2.2.5 (username) SQL Injection

POWER PHLOGGER v.2.2.5 username SQL Injection Author: Attila Gerendi Darkz Date: December 20, 2005 Package: POWER PHLOGGER http://www.phpee.com/ Versions Affected: v.2.2.5 Other versions may also be affected Severity: SQL Injection Description: Input passed to the "username" parameter in...

Re: [Full-disclosure] [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability

On Sun, Apr 22, 2007 at 05:41:25PM +0200, Sebastian Rother wrote: On Sun, 22 Apr 2007 01:32:35 -0400 [email protected] Youness Alaoui wrote: Hi, I'm a developer and admin of the aMSN project, someone just sent me this link...

SymEvent Driver Local Access System Denial of Service

Hello, Today, we have accidentally discovered that the vulnerability, which is described here http://www.symantec.com/avcenter/security/Content/2006.09.20a.html and its third party identifications are BID: 20051 Secunia Advisory: SA21938 CVE: CVE-2006-4855 is active again in the today's update of...

flash plug-horse technology-vulnerability warning-the black bar safety net

Recently in a foreign country on the website to see an article about Backdooring Flash Objects the walkthroughof the article, the translation test a bit First class Backdoor function Backdoor static function mainmc getURL"javascript:alert'hello from backdoor'"; As the initial script, written in...

On the Windows System to achieve the DDOS attack-vulnerability warning-the black bar safety net

First said we used to attack the client and server method of configuration, using the moment the most famous of REDHAT LINUX for testing, the present attack test I'm using FEDORA CORE3, the software is the most famousDDOSattack tool TFN2K LINUX Edition, is to attack the WINDOWS Server system is...

The use of LINUX systems with DDOS attacks for WINDOWS servers-vulnerability warning-the black bar safety net

Use the moment the most famous of the REDHAT LINUX test,the present attack test I'm using FEDORA CORE3 ,software is the most famousDDOSattack tool TFN2K LINUX version,is to attack the WINDOWS Server system is using Windows 2000 Server service open APACHE2 FTP VNC little relationship,mainly to...

FreeBSD 5.4 / 6.0 (ptrace PT_LWPINFO) Local Denial of Service Exploit

Exploit for bsd platform in category dos / poc ===================================================================== FreeBSD 5.4 / 6.0 ptrace PTLWPINFO Local Denial of Service Exploit ===================================================================== include include include / lol lol, exploit...

Distributed reflection: a new generation of DDoS attacks-vulnerability warning-the black bar safety net

Original:Steve Gibson www.grc.com Translation:useless Jun www.isfocus.com Translator's note: A few days ago received a friend sent this article,but quite interesting,so the translation came out. Because time is relatively tight,I only translated the principles and the defense portion,the front...

CVE-2006-4909

Cross-site scripting XSS vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.16, when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh...

CVE-2006-4909

Cross-site scripting XSS vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.16, when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh...

CVE-2006-4909

Cisco Guard DDoS Mitigation Appliance (before 5.1(6)) contains a cross-site scripting (XSS) vulnerability that can be triggered when anti-spoofing is enabled. Remote attackers can inject arbitrary web script or HTML through certain URL character sequences that are mishandled during the appliance’...

SQL-Injection in Shop-Script PRO & Shop-Script Premium all version

Advisory: SQL-Injection in Shop-Script PRO & Shop-Script Premium all version. Home Page: http://shop-script.ru Уязвимость/Vulnerability: SQL-injection в зоне администрирования. Уязвимый скрипт/Vulnerable script: admin.php...

GNU BinUtils 2.1x - Buffer Overflow

GNU BinUtils 2.1x - Buffer Overflow source: https://www.securityfocus.com/bid/17950/info GNU 'binutils' is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Remote attackers may crash...