CVE-2006-2213: Undefined Security Weakness

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

security flaw

webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...

CVE-2006-1987

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

Design/Logic Flaw

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

CVE-2006-1987

Apple Safari 2.0.3 is affected by a denial-of-service and possible code execution vulnerability tied to invalid FRAME tag handling, potentially triggered by (1) multiple SCROLLING attributes with no values or (2) a SRC attribute with no value. The original note indicates uncertainty about which v...

CVE-2006-1987: Undefined Security Weakness

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

Sybase EAServer 5.2 (WebConsole) Remote Stack Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

CVE-2006-1385

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame...

Stack overflow

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame...

CVE-2006-1385

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame...

CVE-2006-1385

KISMAC (R54–R73p) is affected by a stack-based buffer overflow in the parseTaggedData function of WavePacket.mm. The vulnerability allows remote attackers to execute arbitrary code by crafting multiple SSIDs in a Cisco vendor tag within an 802.11 management frame. The issue is triggered via malfo...

CVE-2006-1385: Undefined Security Weakness

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame...

CVE-2006-0188

webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...

CVE-2006-0731

WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...

Design/Logic Flaw

WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...

SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow (Metasploit)

SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Expl (meta)

Exploit for unknown platform in category remote exploits ==================================================================== SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Exploit meta ==================================================================== This file is part of the Metasploit...

SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Ubuntu 4.10 / 5.04 : mozilla vulnerabilities (USN-155-1)

Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious website to spoof the contents of other websites. CAN-2005-1937 It was discovered that a malicious website could injec...