1759 matches found
G & Jan article system of 0day-vulnerability warning-the black bar safety net
Excerpt from: San ㄗ Feng 訫 locks of love'S Blog G & Jan article system 0. 9. 6 presenceSQl injectionvulnerability This system overall security to do good, whether it is from post, get or Cookies, etc. are filtered good, but in the ads. asp there is a little small problem, look at the code...
CVE-2008-7115
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...
Authentication flaw
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...
CVE-2008-7115
The CVE-2008-7115 entry documents a remote-authentication bypass against Belkin Wireless G Router/F5D7632-4V6 (firmware 6.01.08). The vulnerability allows an attacker to bypass login and gain administrator privileges by directly requesting one of three CGI binaries: statusprocess.exe, system_all....
CVE-2008-7115
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...
Mozilla Products 'select()' DoS Vulnerability - Linux
Mozilla Firefox/Seamonkey/Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
New DOM Flaw Can Crash IE, Other Major Browsers
From The H Security The Luxembourg security specialists G-SEC have published details of a vulnerability in the majority of browsers which will either crash the browser or consume so much memory that it makes the computer virtually unusable. The trick is simple. Using JavaScript’s DOM Document...
Linksys WVC54GCA 1.00R221.00R24 (Wireless-G) - Multiple Cross-Site Scripting Vulnerabilities
Linksys WVC54GCA 1.00R221.00R24 Wireless-G - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34714/info Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera is prone to multiple cross-site scripting vulnerabilities because the software fails to...
Linksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/34714/info Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...
Linksys WVC54GCA Wireless-G '/img/main.cgi' Information Disclosure
The remote host is a Linksys WVC54GCA network camera. The version of the firmware of the remote camera contains a flaw that allows authenticated users to download the .htpasswd file from the remote host, which gives them the ability to crack the passwords of other users, including the password of...
Integer overflow
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "gallocn."...
CVE-2009-0165
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "gallocn."...
Linksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - 'adm/file.cgi' Multiple Directory Traversal Vulnerabilities
source: https://www.securityfocus.com/bid/34713/info Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues using...
Linksys WVC54GCA 1.00R221.00R24 (Wireless-G) - admfile.cgi Multiple Directory Traversal Vulnerabilities
Linksys WVC54GCA 1.00R221.00R24 Wireless-G - admfile.cgi Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/34713/info Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera is prone to multiple directory-traversal vulnerabilities because the software fail...
ZyXel G-570S multiple security vulnerabilities
Unauthorized configuration access, DoS, information disclosure...
[SA34275] ZyXEL G-570S Multiple Vulnerabilities
---------------------------------------------------------------------- Secunia is pleased to announce the release of the annual Secunia report for 2008. Highlights from the 2008 report: Vulnerability Research Software Inspection Results Secunia Research Highlights Secunia Advisory Statistics...
Design/Logic Flaw
The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service system crash or gain privileges via a crafted IOCTL request, as demonstrated by executi...
CVE-2008-6000
The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service system crash or gain privileges via a crafted IOCTL request, as demonstrated by executi...
CVE-2008-6000
The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service system crash or gain privileges via a crafted IOCTL request, as demonstrated by executi...
CVE-2008-6000
The CVE-2008-6000 entry concerns the GDTdiIcpt.sys driver used by G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008. A crafted IOCTL input to IOCTL 0x8317001c causes the driver to populate kernel registers in a way that can trigger a denial of service (system crash) or allow privil...