Fedora 10 : icu-4.0-3.1.fc10 (2009-6273)

CVE-2009-0153 Handle illegal sequences consistently Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...

BBC botnet buy: What were they thinking?

By Roel Schouwenberg As Dancho Danchev pointed out, the BBC leased itself a botnet zdnet.com. I couldn’t quite believe it when I read it. The BBC, arguably one of the very best TV producers in the world, surely should have known better? There are so many things wrong about this that I hardly know...

Nokia N70/N73 Bluetooth Stack Denial Of Service

Nokia N70/N73 Bluetooth Stack OBEX Implementation Denial of Service ------------------------------------------------------------------ I. Summary Nokia N70 and N73 are two popular models from Nokia's N-series lineup of smart phones. A flaw has been found in the OBEX implementation in these two...

ClamAV 'chmunpack.c'非法内存访问远程拒绝服务漏洞

BUGTRAQ ID: 30994 CVE ID：CVE-2008-1389 CNCVE ID：CNCVE-20081389 ClamAV是一款反病毒应用程序。 ClamAV处理畸形CHM文件存在非法内存访问错误，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 问题存在于'chmunpack.c'中，畸形的CHM文件，诱使ClamAV处理可触发此漏洞。 ifenslave ifenslave 0.88 Clam Anti-Virus ClamAV 0.93.1 Clam Anti-Virus ClamAV 0.92.1 Clam Anti-Virus ClamAV 0.91.2 Cl...

Microsoft Windows Messenger Remote Illegal Access Vulnerability

Microsoft Windows Messenger Remote Illegal Access Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: A remote illegal access vulnerability exists in Microsoft Windows Live Messenger. A vicious attacker can control the Live Messenger via constructing a malicious web...

Green create articles simple system analysis-vulnerability warning-the black bar safety net

Analysis time: 2008-7-7 1 of 4: 38-18: a 0 0 Vulnerability release:Awolf small C Affected versions: QCDNNEWS Version 4.13 other version not see Vulnerability file: UserReg. asp Note:Use this article to do illegal acts with the author himself independent Recently to the company to find the entire...

MS Office Snapshot Viewer ActiveX Exploit (executable version)-vulnerability warning-the black bar safety net

By:lcx Executable version, please do not used for illegal purposes. script type="text/javascript" function killErrors return true; window. onerror = killErrors; var x; var obj; var mycars = new Array; mycars0 = "c:/Program Files/Outlook Express/wab.exe"; mycars1 = "d:/Program Files/Outlook...

Small conference Baidu post bar title XSS vulnerabilities [Fixed]-bug warning-the black bar safety net

Source: 80sex The first reference to http://www. 80sec. com/charset-xss. html.：） This vulnerability in different browsers on the performance of the out the effects of each different, in GBKXX coding the next FF will recognize this illegal character put it when half the width of the byte and a...

erfurtwiki-lfi.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: ErfurtWiki = R1.02b css Local...

[web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =========:: Tornado Knowledge Retrieval Syste...

CVE-2008-0536

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0536: Improper Authentication

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

Namazu cross-site scripting vulnerability

Overview Namazu is vulnerable to cross-site scripting due to a problem in namazu.cgi. If an illegal character is specified in a string search of namazu.cgi, the subsequent characters are not processed properly. Impact All sites that use namazu.cgi for search processing on websites are vulnerable ...

CenterIM 4.22.3 - Remote Command Execution

CenterIM 4.22.3 - Remote Command Execution Application: CenterIM http://www.centerim.org/index.php/MainPage Versions: centerim = 4.22.3 OS: Linux Bug: Execution of shell commands Exploit: remote Date: 15 March 2008 Author: Brian Fonfara w00 eMail: [email protected] Web: newb.kicks-ass.net 1 Bu...

Hitachi SEWB/PLATFORM SEWB3远程拒绝服务漏洞

BUGTRAQ ID: 27900 CNCAN ID:CNCAN-2008022204 Hitachi SEWB/PLATFORM SEWB3存在未明安全问题。 当SEWB3从其他非SEWB进程接收到非法数据时，SEWB3消息服务会挂起或崩溃。 如果你系统设置作为服务器-客户端系统，此问题会发生，服务器和客户端消息服务全受影响。 Hitachi SEWB3/PLATFORM 02-14-/A Solaris Hitachi SEWB3/PLATFORM 02-13 AIX Hitachi SEWB3/PLATFORM 01-17-/F HP-UX11.x Hitachi...

Debian Security Advisory DSA 864-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 864-1. OpenVAS Vulnerability Test $Id: deb8641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 864-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 210-1 (lynx, lynx-ssl)

The remote host is missing an update to lynx, lynx-ssl announced via advisory DSA 210-1. OpenVAS Vulnerability Test $Id: deb2101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 210-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 862-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 862-1. OpenVAS Vulnerability Test $Id: deb8621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 862-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-210)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...