ActiveNews Manager - articleId SQL Injection (1)

ActiveNews Manager - articleId SQL Injection 1 source: https://www.securityfocus.com/bid/21167/info Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied...

Clever Copy 2.0 - 'categorysearch.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14395/info Clever Copy is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

Cisco IOS 12.x11.x - HTTP Remote Integer Overflow

Cisco IOS 12.x11.x - HTTP Remote Integer Overflow / ..--== Phenoelit ==--.. / \ | CISCO CASUM EST | .. ../ ---==MMIII==--- Cisco IOS 12.x/11.x remote exploit for HTTP integer overflow in URL using IOS 11.x UDP Echo memory leak for shellcode placing and address calculation. This code does support...

Cisco IOS HTTP remote exploit

Hi there, finally released, the exploit for the Cisco IOS HTTP 2GB overflow http://www.cisco.com/warp/public/707/cisco-sn-20030730-ios-2gb-get.shtml and the IOS 11.x remote sniffer using the bug described here: http://www.cisco.com/warp/public/707/cisco-sn-20030731-ios-udp-echo.shtml Exploit:...

CUPS 1.1.x - Negative Length HTTP Header

CUPS 1.1.x - Negative Length HTTP Header source: https://www.securityfocus.com/bid/6437/info A vulnerability has been reported for CUPS that if exploited may result in a DoS or the execute of code on affected systems. An attacker can exploit this vulnerability by connecting to a vulnerable system...

Lotus Domino Server 5.0.x - Directory Traversal (2)

Lotus Domino Server 5.0.x - Directory Traversal 2 source: https://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with...