Debian: Security Advisory (DSA-743-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AGENCY4NET WEBFTP 1 - download2.php File Disclosure

AGENCY4NET WEBFTP 1 - download2.php File Disclosure AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability http://sourceforge.net/project/platformdownload.php?groupid=206982 POC : /Script/download2.php?file=../../../../../../../../../../../etc/passwd D0rk : : TrYaG-TeaM...

ht://Dig Htsearch跨站脚本漏洞

ht://Dig是一款用来webserver的索引和搜索文件的应用程序。 ht://Dig不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是由于'sytnax.html'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得目标用户敏感信息。 测试方法 http://foo.bar/cgi-bin/htsearch?config=&restrict=&exclude=&method=and&format=builtin-long&sort=scriptalert"foo"/script&words=foo ht://Dig...

ht:Dig 3.2 - Htsearch Cross-Site Scripting

ht:Dig 3.2 - Htsearch Cross-Site Scripting source: https://www.securityfocus.com/bid/26610/info ht://Dig is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows an attacker to execute arbitrary HTML or script code...

ht://Dig 3.2 - Htsearch Cross-Site Scripting

source: https://www.securityfocus.com/bid/26610/info ht://Dig is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows an attacker to execute arbitrary HTML or script code in a user's browser session in the context...

Buffer overflow

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

Design/Logic Flaw

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5788

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

CVE-2007-5789

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5789

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5788

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

CVE-2007-5789

The CVE-2007-5789 entry describes the Grandstream HT-488 0.1 as vulnerable to a denial-of-service via a flood of fragmented packets sent to UDP/TCP port 5060. The underlying fault is not elaborated in the provided materials beyond the consumer-facing impact (device crash) and remote exploitabilit...

CVE-2007-5788

CVE-2007-5788 affects Grandstream HT-488 (firmware 0.1) with a buffer overflow in the SIP parser. A crafted SIP INVITE message can cause a remote denial of service (device crash). Connected records confirm the same vulnerability across multiple sources, but do not provide additional technical det...

CVE-2007-5789: Undefined Security Weakness

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5788: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

Buffer overflow

Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the details were obtained from third party information...

CVE-2007-2823

Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the details were obtained from third party information...

CVE-2007-2823

Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the details were obtained from third party information...

CVE-2007-2823

HT Editor prior to version 2.0.6 contains multiple buffer overflows that could allow remote attackers to execute arbitrary code via unspecified vectors, possibly related to editor display width. The issue is described across multiple sources (NVD, CVE listing, and related entries). The exact vuln...

CVE-2007-2823: Undefined Security Weakness

Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the details were obtained from third party information...