SSGBook 1.0 - Image Tag HTML Injection

source: https://www.securityfocus.com/bid/5915/info SSGbook includes codes for allowing users to specify HTML formatting and layout inside of guestbook entries. For example, a user can include an image by including it inside of image or img tags. However, arbitrary HTML and script code are not...

Ben Chivers Easy Guestbook 1.0 - Administrative Access

Ben Chivers Easy Guestbook 1.0 - Administrative Access source: https://www.securityfocus.com/bid/5341/info The vulnerability has been reported for Easy Guestbook 1.0. It is possible for an atttacker to modify any user's guestbook by deleting entries. The vulnerability is the result of Guestbook...

Easy Guestbook Vulnerabilities

AresU Advisory 19/July/2002 Easy Guestbook Vulnerabilities Severity : High Possible to edit member homepage Systems Affected: Easy Guestbook v1.0 Vendor URL : http://www.easyscripts.co.uk Vuln Type : It does not use Access Validation to delete the entries and login as Admin Control. Author : Ares...

CVS (Web-Based) Entries File Information Disclosure

The remote web server allows access to a 'CVS/Entries' file and thereby exposes file names in the associated repository. %NASLMINLEVEL 70300 This script was written by Nate Haggard SecurityMetrics inc. See the Nessus Scripts License for details Changes by Tenable: - pattern matching to determine ...

Arp spoofing в CISCO

ARP-пакет позволяет переписать arp-запись...

Большая дырка в ssh (unauthorized access)

Если в файле паролей запись о пароле пользователя состоит из двух символов или менее это часто применяется для слудебных щаписей не относящихся к пользователям то ssh позволяет войти с такой записью без пароля...

CVE-2024-2056

creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2024-03-05 21:26:38+00:00| seen| https://t.me/ctinow/200709 2024-03-05 21:26:51+00:00| seen| https://t.me/ctinow/200718...

CVE-2000-1007: Undefined Security Weakness

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

vixie-cron - Local Privilege Escalation

vixie-cron - Local Privilege Escalation !/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo...

Небольшая дырка в I-Gear

Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...

CVE-2000-0076

nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover...

newsbug.txt

------=NextPart000015301BF7FF9.87FC33E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I created my NewsBug approximately 2-3 months ago but never did = anything further with it as I have a lot of other projects I am working = on. I reported this to MS ...

CVE-1999-0461: Undefined Security Weakness

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address...

CVE-1999-0764

NetBSD allows ARP packets to overwrite static ARP entries...

CVE-1999-0764

NetBSD ARP handling allows ARP packets to overwrite static ARP entries. This can affect ownership of IP-to-MAC mappings, with partial integrity and availability impact as per NVD metrics. The exact affected NetBSD versions, vulnerable code path, exploit details, and official remediation are not p...

CVE-1999-0764: Undefined Security Weakness

NetBSD allows ARP packets to overwrite static ARP entries...

CVE-1999-0763: Undefined Security Weakness

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...

nmap_cisco_dos.txt

From: "Lancashire, Andrew" This is to clarify what is being put out by Cisco and what we are being told by Cisco. Two e-mails below is what Cisco is telling us and makes alot more sense than what Cisco is telling Bugtraq. The last post to Bugtraq made mention that the arp cache was filling up and...

cisco_and_nmap_dos.txt

Subject: Re: Cisco and Nmap Dos To: [email protected] Hi all, I wanted to address the items listed here. We are still investigating this problem, and hope to have more information later on in the week. Item 1, OSPF is not an issue. According to the configuration information provided to us...

yahoo.news.ticker.txt

FOR IMMEDIATE RELEASE: Application: Yahoo! NEWS TICKER Platforms : Win95,98,NT Advisory: The installation process of the Yahoo! NEWS TICKER leaves a file name "install.log" in the program directory. The file contains plaintext userid and password. The installation process also sets registry entri...