882 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0494
Cross-site scripting XSS vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0494
Cross-site scripting XSS vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0494
The CVE-2008-0494 entry describes a Cross-site scripting (XSS) vulnerability in Endian Firewall 2.1.2, specifically in vpnum/userslist.php where the psearch parameter can be manipulated to inject arbitrary web script/HTML. The connected documents corroborate the affected product and parameter but...
endian-xss.txt
Security Advisory - Multiple Vulnerabilities in Endian firewall Endian Firewall is a "turn-key" linux security distribution that turns every system into a full featured security appliance. It features stateful packet filtering, proxies, antivirus/antispam, content filtering and a VPN module. Date...
Debian Security Advisory DSA 833-2 (mysql-dfsg-4.1)
The remote host is missing an update to mysql-dfsg-4.1 announced via advisory DSA 833-2. OpenVAS Vulnerability Test $Id: deb8332.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 833-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 1070-1 (kernel-source-2.4.19,kernel-image-sparc-2.4,kernel-patch-2.4.19-mips)
The remote host is missing an update to a kernel image as announced via advisory DSA 1070-1. For details on the issues addressed in this update please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb10701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...
Debian Security Advisory DSA 678-1 (netkit-rwho)
The remote host is missing an update to netkit-rwho announced via advisory DSA 678-1. OpenVAS Vulnerability Test $Id: deb6781.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 678-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1361-1] New postfix-policyd packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1361 [email protected] http://www.debian.org/security/ Steve Kemp August 29th, 2007 http://www.debian.org/security/faq -...
MOPB-25-2007:PHP header() Space Trimming Buffer Underflow Vulnerability
Summary Since PHP 5.2.0 there is a new memory manager that allows exploiting of even one byte underflow vulnerabilities like the one described by this advisory. When an all whitespace string is passed to the header function this can result in a buffer underflow that allows code execution on atlea...
PHP header() function memory corruption
Heap memory page coruption allows code execution on big endian systems...
PHP <= 4.4.6 / 5.2.1 array_user_key_compare() ZVAL dtor Local Exploit
Exploit for linux platform in category local exploits ===================================================================== PHP = 4.4.6 / 5.2.1 arrayuserkeycompare ZVAL dtor Local Exploit ===================================================================== ?php...
MOPB-19-2007:PHP ext/filter Space Trimming Buffer Underflow Vulnerability
Summary Since PHP 5.2.0 there is not only the new filtering extension in PHP but also a new memory manager that allows exploiting the following ext/filter vulnerability. When an all whitespace string is passed to some of the filter functions like FILTERVALIDATEINT this can result in a buffer...
Axigen 2.0.0b1 - Remote Denial of Service (1)
Axigen 2.0.0b1 - Remote Denial of Service 1 / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a...
[SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1226-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 3rd, 2006 http://www.debian.org/security/faq -...
DSA-1225-1 mozilla-firefox
Bulletin has no description...
[SECURITY] [DSA 1107-1] New GnuPG packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1107-1 [email protected] http://www.debian.org/security/ Martin Schulze July 10th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1084-1 [email protected] http://www.debian.org/security/ Steve Kemp May 31st, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1052-1 [email protected] http://www.debian.org/security/ Martin Schulze May 8th, 2006 http://www.debian.org/security/faq -...