2503 matches found
phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpBBViet 0.22 phpbbrootpath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: xoron...
openSUSE 10 Security Update : php5 (php5-3745)
The following issues have been fixed in PHP, which were spotted by the MOPB project or fixed in PHP 5.2.3 release : - missing openbasedir and safemode restriction CVE-2007-3007 - chunksplit integer overflow CVE-2007-2872 - DoS condition in libgd's image processing CVE-2007-2756 - possible...
PHP 4/5 - Executor Deep Recursion Remote Denial of Service
source: https://www.securityfocus.com/bid/22766/info PHP is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker with permissions to execute PHP code on an affected computer may exploit this issue to crash PHP and kill all remaining...
Cisco Firewall Services Module vulnerable to DoS via inspection of malformed SIP messages
Overview Cisco Firewall Services Module fails to properly inspect SIP messages. This vulnerability may allow a remote attacker to cause a denial of service condition. Description The Cisco Firewall Services Module is an integrated firewall service for Cisco Catalyst 6500 series switches and Cisco...
Cisco Firewall Services Module, PIX and ASA SIP Message Denial of Service Vulnerability
Cisco Firewall Services Module, PIX Security Appliance, and ASA Security Appliance contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists due to an error when handling SIP messages. An unauthenticated, remo...
Crack the freezing point reduction 6. 0 The method and the freezing point reduction works-vulnerability warning-the black bar safety net
Deep Freeze & How to crack Deep Freeze 6.0 The author of the article:old yellow article source:CNOOC gas One, first the way freezing works. Without the patience of friends can jump directly to the second part to see how to crack the freezing point reduction 6. 0 in. Probably a lot of people have...
Deep CMS Index.PHP远程文件包含漏洞
Deep CMS是一款基于PHP的内容管理程序。 Deep CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'index.php'脚本对用户提交的'ConfigDir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Deep CMS Deep CMS 2.0a 目前没有详细解决方案提供，请关注以下链接： http://wapcms.ru/ !/usr/bin/env python coding: utf-8 from pocsuite.net import req from...
CVE-2006-5251
PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the ConfigDir parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-5251
PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the ConfigDir parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-5251
The CVE-2006-5251 entry concerns Deep CMS 2.0a where a PHP remote file inclusion flaw exists in index.php, enabling an attacker to execute arbitrary PHP code by supplying a URL via the ConfigDir parameter. The vulnerability is tied to Deep CMS’s handling of the ConfigDir value and is documented a...
Deep CMS 2.0 - index.php Remote File Inclusion
Deep CMS 2.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/20402/info Deep CMS is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Deep CMS 2.0 - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20402/info Deep CMS is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with th...
Stack overflow
Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy...
CVE-2006-1452
Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy...
Authentication flaw
Blue Coat Proxy Security Gateway OS SGOS 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters...
CVE-2006-0578
Blue Coat Proxy Security Gateway OS SGOS 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters...
CVE-2006-0578
Blue Coat Proxy Security Gateway OS SGOS 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters...
PT-2006-1640 · Blue Coat · Blue Coat Proxy Security Gateway Os
Name of the Vulnerable Software and Affected Versions: Blue Coat Proxy Security Gateway OS SGOS version 4.1.2.1 Description: The issue allows remote attackers to bypass connection filters due to the lack of enforcement of CONNECT rules when using Deep Content Inspection. Recommendations: For...
PT-2026-26286
Name of the Vulnerable Software and Affected Versions XML::Parser versions through 2.47 Description The software contains a heap buffer overflow in the st serial stack function. This occurs when parsing XML files with deeply nested elements. Specifically, when stackptr equals stacksize - 1, the...
