PT-2006-6440 · Rhadrix · Rhadrix If-Cms

Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue allows remote attackers to obtain the full path of the web server. This is achieved by providing empty arguments, specifically rns or pag, which results in an error message that...

Heart empty Forum(CKong) v2. 5 SQL injection vulnerability-vulnerability warning-the black bar safety net

Program: heart empty ForumCKong Version:=2.5 Type: sql injection Vulnerability analysis 1, The post.php | ? requireonce"include/config.inc.php"; requireonce'include/functions.inc.php'; $fid=intval$fid; $tid=intval$tid; $pid=intval$pid; ......... if!$ Cerrormsg if$postid $sql='select...

Low: Red Hat Bug Fix Advisory: conga bug fix update

Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...

PT-2006-4420 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7.0 Beta Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a web page containing multiple empty APPLET start tags. A third party has dispute...

Communigate Pro mail server DoS

Server crash on empty mailbox access with malformed client...

CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

DEBIAN-CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

GNUnet <= 0.7.0d (Empty UDP Packet) Remote Denial of Service Exploit

No description provided by source. GNUnet = 0.7.0d Empty UDP Packet Remote Denial of Service Exploit http://www.milw0rm.com/sploits/05152006-udpsz.zip milw0rm.com 2006-05-15...

GNUnet 0.7.0d - Empty UDP Packet Remote Denial of Service

GNUnet = 0.7.0d Empty UDP Packet Remote Denial of Service Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1792.zip 05152006-udpsz.zip...

GNUnet 0.7.0d - Empty UDP Packet Remote Denial of Service

GNUnet 0.7.0d - Empty UDP Packet Remote Denial of Service GNUnet = 0.7.0d Empty UDP Packet Remote Denial of Service Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1792.zip 05152006-udpsz.zip...

CVE-2006-1235

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories possibly only empty directories via the $deleteuser variable. NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue;...

Cross site scripting

The cross-site scripting XSS countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using "AAA", possibly due to nested or empty tags...

DEBIAN-CVE-2006-0146

The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PHPOpenChat, 7 MAXdev MD-Pro, and 8 MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via...

CVE-2005-4857

eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service Apache httpd segmentation fault via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a...

TYPSoft empty username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linksys WRT54G DoS

It is possible to freeze the remote web server by sending an empty GET request. This is know to affect Linksys WRT54G routers. OpenVAS Vulnerability Test $Id: linksysemptyGETDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Linksys WRT54G DoS Authors: Michel Arboi Copyright: Copyright C 20...

Symantec Discovery unauthorized database access

Few accounts with empty passwords are created during installation...

security flaw

The KEYCTLJOINSESSIONKEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service semaphore hang via a new session keyring 1 with an empty nam...

Hitachi Cosminexus logical bug

For HTTP POST request with empty body data from previous POST request is used...

NPE in SpaceHelper borks page....

If you have a url for Space admin : http://server.name.com/spaces/listdecorators.action?key=BP2I And you get the space key wrong, then rather than failing gracefully, you end up with an sitemesh decoration of an empty page.... Looking at the code, you can see why: public String getSpaceName retur...