1770 matches found
CVE-2007-3771
Symantec CVE-2007-3771 describes a stack-based overflow in Internet Email Auto-Protect of Symantec AntiVirus Corporate Edition (pre-10.1) and Client Security (pre-3.1). The vulnerability allows a local user to crash the real-time Internet Email scanning service by sending an outbound SMTP message...
CVE-2007-3771
Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...
Unfixed XSS vulnerability at www.klastv.com.tr
Security researcher BackDoor, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.klastv.com.tr, which at the time of submission ranked 1379024 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is...
Unfixed XSS vulnerability at www.cihan.com.tr
Security researcher cyber, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.cihan.com.tr, which at the time of submission ranked 98069 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is currently...
Unfixed XSS vulnerability at yp.peercast.org
Security researcher kusomiso.com, has submitted on 07/09/2007 a cross-site-scripting XSS vulnerability affecting yp.peercast.org, which at the time of submission ranked 94714 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is...
Unfixed XSS vulnerability at collections.politicallibrary.org
Security researcher frosTMaturidi, has submitted on 07/07/2007 a cross-site-scripting XSS vulnerability affecting collections.politicallibrary.org, which at the time of submission ranked 5221280 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Unfixed XSS vulnerability at www.computingstudents.com
Security researcher frosTMaturidi, has submitted on 07/07/2007 a cross-site-scripting XSS vulnerability affecting www.computingstudents.com, which at the time of submission ranked 2961889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
CVE-2007-3598
index.php in vtiger CRM before 5.0.3 allows remote authenticated users to obtain all users' names and e-mail addresses, and possibly change user settings, via a modified record parameter in a DetailView action to the Users module. NOTE: the vendor disputes the changing of settings, reporting that...
Unfixed XSS vulnerability at www.the-spectrum.org
Security researcher KaBuS, has submitted on 07/03/2007 a cross-site-scripting XSS vulnerability affecting www.the-spectrum.org, which at the time of submission ranked 4117787 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2007. It is...
Unfixed XSS vulnerability at www.dalnegro.it
Security researcher T0T4L, has submitted on 25/06/2007 a cross-site-scripting XSS vulnerability affecting www.dalnegro.it, which at the time of submission ranked 760235 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/06/2007. It is currently...
Unfixed XSS vulnerability at shop.webservis.com.tr
Security researcher St@rExT, has submitted on 17/06/2007 a cross-site-scripting XSS vulnerability affecting shop.webservis.com.tr, which at the time of submission ranked 128000 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2007. It is...
Stack overflow
Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Unfixed XSS vulnerability at ng.pic.to
Security researcher kusomiso.com, has submitted on 06/10/2007 a cross-site-scripting XSS vulnerability affecting ng.pic.to, which at the time of submission ranked 21476 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is currently...
Unfixed XSS vulnerability at www.porndiner.com
Security researcher Yachi, has submitted on 06/10/2007 a cross-site-scripting XSS vulnerability affecting www.porndiner.com, which at the time of submission ranked 8770744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...
Unfixed XSS vulnerability at medefisdemo.com
Security researcher BackDoor, has submitted on 06/09/2007 a cross-site-scripting XSS vulnerability affecting medefisdemo.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currently...
Unfixed XSS vulnerability at www.inspirationpeak.com
Security researcher BackDoor, has submitted on 06/09/2007 a cross-site-scripting XSS vulnerability affecting www.inspirationpeak.com, which at the time of submission ranked 181209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2007. It i...
comicsense-sql.txt
Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The bug is a common sql injection in...
CVE-2003-1330
Technical details about CVE-2003-1330 are not provided in the connected documents. The initial description summarizes the vulnerability as bypass of e-mail attachment filtering via an undetected attachment. Monitor for official advisories or patches.
CVE-2001-1581
The CVE-2001-1581 affects Clearswift MAILsweeper for SMTP 4.2, where the File Blocker feature can be bypassed by attackers manipulating a Content-Type header filename, enabling bypass of attachment filtering policies. Impact per CVSS2: Network attack, low complexity, no authentication required, w...