CVE-2005-4508

Nexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path via a URL containing a non-existent .dll file...

CVE-2005-4506

Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges...

CVE-2005-4507

CVE-2005-4507 documents multiple cross-site scripting (XSS) vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier. Affected component: the web application’s user input handling where unvalidated inputs can lead to script/HTML injection. Impact is partial integrity compromise of affected pa...

CVE-2005-4506

Nexus Concepts Dev Hound 2.24 and earlier stores usernames and passwords in cleartext in the devhound.tdbd file, enabling local users to gain privileges. Affected component: Dev Hound data store file devhound.tdbd. Root cause: credentials saved in cleartext. Impact: local privilege escalation if ...

CVE-2005-4508

CVE-2005-4508 affects Nexus Concepts Dev Hound (versions 2.24 and earlier). The vulnerability allows remote attackers to discover the installation path by requesting a URL containing a non-existent .dll file, exposing partial confidentiality via a path disclosure. The available documents do not s...

CVE-2005-3631

udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords...

security flaw

udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords...

CVE-2005-4421

Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name...

CVE-2005-4421

Dev-Editor 3.0 is affected by a directory traversal vulnerability: remote attackers can access directories outside the web root whose names are substrings of the web root directory. This CVE (CVE-2005-4421) is rated CVSSv2 base score 7.5 (HIGH) with network attack vector, low attack complexity, n...

CVE-2005-4421

Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name...

CVE-2005-4256

Cross-site scripting XSS vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forumtitle parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in...

CVE-2005-4256

CVE-2005-4256 describes a cross-site scripting (XSS) vulnerability in ASP-DEV XM Forum RC3, specifically in forum.asp where the forum_title parameter can inject arbitrary script/HTML. Affected item is XM Forum RC3 (forum.asp handling). The core issue is an XSS in the forum_title parameter, enabli...

CVE-2005-4165

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to forum.asp, 2 unspecified parameters to register.asp, and 3 the "Search For" field in search.asp...

CVE-2005-4165

CVE-2005-4165 affects ASP-DEV ASP Resources Forum. The vulnerability allows remote SQL injection through (1) forum_id in forum.asp, (2) unspecified params in register.asp, and (3) the Search For field in search.asp, enabling arbitrary SQL execution. The NVD notes a base score of 7.5 (HIGH) with n...

CVE-2005-4165

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to forum.asp, 2 unspecified parameters to register.asp, and 3 the "Search For" field in search.asp...

CVE-2002-2197

Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service kernel panic via a program that uses /dev/poll, triggering a NULL pointer dereference...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...

[SA17537] Dev-Editor Virtual Root Directory Restriction Bypass

TITLE: Dev-Editor Virtual Root Directory Restriction Bypass SECUNIA ADVISORY ID: SA17537 VERIFY ADVISORY: http://secunia.com/advisories/17537/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Dev-Editor 3.x http://secunia.com/product/6093/ DESCRIPTION: A security issue...

linux/x86 snoop /dev/dsp shellcode 172 bytes

linux/x86 snoop /dev/dsp shellcode 172 bytes. Shellcode exploit for linx86 platform / Placed the listener here http://www.milw0rm.com/down.php?id=1293 /str0ke / / hey folks, this is snoopshell, short and simply it snoops on /dev/dsp and after attempting to lower the audio quality will stream any...

ASP-DEv XM Forum IMG Tag Script Injection Vulnerability

The remote web server contains an ASP script which is vulnerable to a cross site scripting issue. Description : The remote host appears to be running the ASP-DEV XM Forum. There is a flaw in the remote software which may allow anyone to inject arbitrary HTML and script code through the BBCode IMG...