Linksys wireless routers information leak

Configuration information, including whole set of password is returned by request to UDP/916 port...

CVE-2007-1569

Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrary code via a yEnc yEncode encoded article with a long filename, as demonstrated using a .nzb file. NOTE: some of these details are obtained from third party information...

Aktueldownload Haber scripti - id SQL Injection

Aktueldownload Haber scripti - id SQL Injection ----------------------------------------------------------------------- Aktueldownload Haber scripti id Remote SQL Injection Vulnerability ----------------------------------------------------------------------- Bulan: xoron xoron.info - xoron.biz...

CVE-2007-0901

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-0901

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-0901

Removed by vendor...

CVE-2007-0901

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-0901

CVE-2007-0901: Multiple XSS vulnerabilities in MoinMoin 1.5.7 Info pages allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters. The description notes the issue in MoinMoin 1.5.7; root cause details and a formal fix/mitigation are not provid...

PT-2007-2342

Name of the Vulnerable Software and Affected Versions: MoinMoin version 1.5.7 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the hitcounts and general parameters in Info pages. This can be exploited through different vectors. Recommendations: For MoinMoi...

CVE-2007-0894

MediaWiki prior to 1.9.2 is affected. The vulnerability allows remote attackers to cause error messages that disclose the installation path by requesting specific skin files (Simple.deps.php, MonoBook.deps.php, MySkin.deps.php, Chick.deps.php) under wiki/skins. This is an information-disclosure i...

Fixed XSS vulnerability at www.izle1.info

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.izle1.info, which at the time of submission ranked 1224994 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...

Unfixed XSS vulnerability at www.japantravelinfo.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.japantravelinfo.com, which at the time of submission ranked 411637 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...

CVE-2007-0857

Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...

CVE-2007-0805

The ps /usr/ucb/ps command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument, a similar issue to CVE-1999-1587...

CheckPoint FireWall-1 information leak

It's possible to retrieve certificate revocation least from internal CA port TCP/18246...

forum livre 1.0 - SQL Injection / Cross-Site Scripting

Title : Forum Livre 1.0 Multiple Remote Vulnerabilities Author : ajann Contact : : $$ : Free SQL--------------------------------------------------------- Login Before..- http://target/path//infouser.asp?user=SQL Example:...

Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow (PoC)

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on 08/02/2006. require 'socket' targetpath = ARGV0 || '/var/run/slpipc' slpsocke...

UBUNTU-CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

Information disclosure

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with 1 AbfrageForm or 2 EingabeForm, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is...