1044 matches found
Land Down Under BBCode HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10435/info Land Down Under is prone to an HTML injection vulnerability. This issue is exposed through their BBCode implementation. Exploitation could permit theft of cookie credentials, manipulation of content, or other...
Qualcomm Eudora Internet Mail Server 1.2 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/75/info There appears to be a buffer overflow in Qualcomm's Eudora Internet Mail Server. If you connect to its TCP port number 106 and issue the USER command followed by a string over than a thousand bytes in length the...
eStore 1.0.2 - SQL Injection Vulnerability
No description provided by source. ===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x W...
LPPlus 3.2.2/3.3 Permissions DoS Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/1643/info Vulnerability 1: Several files that are part of the LPPlus print management system are installed setuid root by default. These files include: $LPHOME/bin/dccsched $LPHOME/bin/dcclpdser $LPHOME/bin/dccbkst These...
Land Down Under 800/801 list.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the...
Appointment Booking Pro Joomla Component LFI Vulnerability
No description provided by source. Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / /...
Verity Search97 2.1 Security Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/162/info A pair of vulnerabilities exist in Verity's Search97 web interface to the Verity search engine. The first vulnerability is due to cgi-bin scripts, s97cgi and s97rcgi failing to check for the existence of certain...
Land Down Under 800/801 links.php w Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the...
PlatinumFTP <= 1.0.18 Multiple Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl pftpdos-ai1.pl - Remote DoS against PlatinumFTP 10.1.18 Details:http://seclists.org/lists/bugtraq/2005/Mar/0222.html If you don't get the server down try to change/play a little bit with the Timeout ports at securityforest dot com | greetings to...
Linux Kernel 2.6.x pipe.c Local Privilege Escalation Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/36901/info Linux kernel is prone to a local privilege-escalation vulnerability that is caused by a NULL-pointer dereference. Local attackers can exploit this issue to execute arbitrary code with kernel-level privileges...
Land Down Under 800/801 plug.php e Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14820/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
FiSH-irssi 0.99 - Evil ircd Buffer Overflow
No description provided by source. FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86 There are a lot mor...
Endeca Latitude 2.2.2 - Cross-Site Request Forgery
Endeca Latitude 2.2.2 - Cross-Site Request Forgery Advisory: Endeca Latitude Cross-Site Request Forgery RedTeam Pentesting discovered a Cross-Site Request Forgery CSRF vulnerability in Endeca Latitude. Using this vulnerability, an attacker might be able to change several different settings of the...
Webfwlog - Firewall Log Analyzer
Webfwlog is a flexible web-based firewall log analyzer and reporting tool. It supports standard system logs for linux, FreeBSD, OpenBSD, NetBSD, Solaris, Irix, OS X, etc. as well as Windows XP®. Supported log file formats are netfilter, ipfilter, ipfw, ipchains and Windows XP®. Webfwlog also...
Full Disclosure Security Mailing List Shuts Down
The Full Disclosure security mailing list, which has been one of the main discussion forums for vulnerability and exploit information for 12 years, is shutting down because “‘one of our own’ would undermine the efforts of the last 12 years”, one of the creators said. John Cartwright, one of the...
Fedora 20 : java-1.7.0-openjdk-1.7.0.60-2.4.4.1.fc20 (2014-1048)
Security update to icedtea 2.4.4 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml Now also arm32 have icedtea 2.4.4, as 2.3 was no longer maintainable. Please note, this will bring significant, but necessary slow down aporx 30% on arm32. As buggy arm32 JIT was removed in...
MIUI-V5 pattern lock/shortcut key switch design flaw could lead to bypass-vulnerability warning-the black bar safety net
Brief description: Today the third to grab the Red rice, or did not grab, depressed and... It seems 9 months of the millet 3 is simply grab the rhythm of Ah, find F-Code, Xiaomi 3 or red rice can be. Don't know why, before submitting a no show.,,, a Detailed description: 1 require F Code. 2 is in...
Fedora 20 : libvirt-1.1.3.1-1.fc20 (2013-20869)
Rebased to version 1.1.3.1 - CVE-2013-4400: virt-login-shell arbitrary file overwrites vulnerability bz 1015228, bz 1025685 - Fix possible domain disappearance on libvirtd crash bz 1015246 - Fix LXC container startup failure bz 1014847 - Slim down libvirt LXC dependencies bz 1012198 Note that...
TigerVNC Server Remote DoS Vulnerability
TigerVNC is an advanced VNC implementation. It is based on the fourth generation of VNC. TigerVNC also includes features from the TightVNC and TurboVNC projects. This includes accelerated JPEG compression. TigerVNC supports the latest X.Org X server. !/usr/bin/env python...
