8678 matches found
eXtreme-fusion 4.02 - 'Fusion_Forum_View.php' Local File Inclusion
source: https://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. By combining thi...
Microsoft Internet Explorer Script Error Handling Memory Corruption Vulnerability
Overview A vulnerability in the way Microsoft Internet Explorer handles certain script errors may lead to memory corruption that may allow remote execution of arbitrary code. Description Microsoft Internet Explorer contains a memory corruption vulnerability that could be exploited when handling...
CVE-2006-5579: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, which results in the access of previously freed memory, aka "Script Error Handling Memory Corruption Vulnerability."...
Microsoft Internet Explorer Script Error Handling Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser handles script errors. An attacker may exploit this vulnerability to execute arbitrary code in the context of the user running the affected browser...
kapda-450.txt
Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...
CVE-2006-5791
Removed by vendor...
Vulnerability in OpenSSL CVE-2006-2937
During the parsing of certain invalid ASN.1 structures an error condition is mishandled. This can result in an infinite loop which consumes system memory...
Moderate: Red Hat Security Advisory: php security update for Stronghold
An updated version of PHP that addresses several security issues is now available for Stronghold 4.0 for Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language. Several security issues were...
[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1069-1 [email protected] http://www.debian.org/security/ Martin Schulze, Dann Frazier May 20th, 2006 http://www.debian.org/security/faq -...
DSA-1069-1 kernel-source-2.4.18 - several
Bulletin has no description...
XINE format string bugs when handling non existen file
Author : KaDaL-X email : [email protected] website : http://kandangjamur.net Software tested Version : 0.99.4 Vendor : http://xine.sourceforge.net Proof Of Concept : Type in your unix console something like this : kandangjamur$xine p-p.mp3 Then, there are two error alert box causing by this...
Vavoom <= 1.19.1 [Multiple Vulnerabilities] Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h include zlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
LieroX 0.62b - Remote Server/Client Denial of Service
/ by Luigi Auriemma / include include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error =...
[Full-disclosure] DM Primer error handling weakness & an old CAM BO revisited
Apologies for the poor grammer and formatting... DM Primer is a shared service related to CA's Unicenter Remote Control. It is used in Enterprise environments to deploy URC6 from the URC v6.x Administration server. Dmprimer.exe listens on a client device for instructions from the server in a...
security flaw
Cross-site scripting XSS vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message...
CVE-2005-4829
VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors...
Blitzkrieg 2 < 1.21 - 'Server/Client' Denial of Service
/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...
Glider collectn kill 1.0.0.0 - Buffer Overflow (PoC)
Glider collectn kill 1.0.0.0 - Buffer Overflow PoC / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
CVE-2005-3277
The LPD service in HP-UX 10.20 11.11 11i and earlier allows remote attackers to execute arbitrary code via shell metacharacters "" or single backquote in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than...
MultiTheftAuto 0.5 patch 1 - Server Crash / MOTD Deletion
/ by Luigi Auriemma / include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call";...