10140 matches found
CentOS 4 : kernel (CESA-2006:0101)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
CVE-2006-2909
CVE-2006-2909 describes a stack-based buffer overflow in PicoZip 4.01’s info tip shell extension (zipinfo.dll) that can be triggered when a user hovers over an ACE, RAR, or ZIP archive containing a very long filename. The vulnerability allows remote code execution under the user’s privileges and ...
CVE-2006-2909
Stack-based buffer overflow in the info tip shell extension zipinfo.dll in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an 1 ACE, 2 RAR, or 3 ZIP archive, which is triggered when the user moves the mouse over the archive...
CVE-2006-2989
ASP ListPics 4.3 and earlier contains a Cross-site scripting (XSS) flaw in listpics.asp that can be exploited by supplying an info parameter value. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected component: listpics.asp in ASP ListPics 4.3 and earlier. R...
CVE-2006-2989
Cross-site scripting XSS vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter...
Publicist v0.95 - XSS And Full Path Errors
Publicist v0.95 Homepage: http://publicist.kau.se/ Description: Publicist is a free web server software, created for web papers, that allows groups of people to write and publish together on the web i.e. schools or single classes, clubs, or other groups who wish to express themselves...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO and 2 the category parameter...
GLSA-200605-08 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200605-08 PHP: Multiple vulnerabilities Several vulnerabilities were discovered on PHP4 and PHP5 by Infigo, Tonu Samuel and Maksymilian Arciemowicz. These included a buffer overflow in the wordwrap function, restriction bypasses i...
PT-2006-3280 · Ispconfig · Ispconfig
Name of the Vulnerable Software and Affected Versions: ISPConfig versions 2.2.2 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the go infoserverclasses root parameter. The vendor has disputed this issue, stating that the affected...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
canbypass.txt
google hack: "Powered by Candidate Resources Inc." I MurderSkillz from g00ns.net have found a auth bypass in Candidate Resources Inc. web software. Looks like there are different places on websies to login. Works for the login pages. Not much you can do but displays the admins info in the edit us...
CVE-2006-1191
Cross-D Domain Information Disclosure vulnerability (CVE-2006-1191) affects IE 5.01–6 and could allow an attacker to read cookies or data from another domain if a user visits a malicious page or opens a malicious email. Exploitation requires user action (visiting a site) and scripting across doma...
DEBIAN-CVE-2006-1296
Untrusted search path vulnerability in Beagle 0.2.2.1 might allow local users to gain privileges via a malicious beagle-info program in the current working directory, or possibly directories specified in the PATH...
Moderate: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 7
Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the seventh regular update. This security advisory has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles...
DEBIAN-CVE-2006-0986
WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 default-filters.php, 2 template-loader.php, 3 rss-functions.php, 4 locale.php, 5 wp-db.php, and 6 kses.php in the wp-includes/ directory; and 7 edit-form-advanced.php, 8...
Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
/==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message including the following line:...
security flaw
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...
CVE-2006-0023
Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the 1 Simple Service Discovery Protocol SSDP, 2...
MyQuiz 1.01 - PATH_INFO Arbitrary Command Execution
MyQuiz 1.01 - PATHINFO Arbitrary Command Execution !/usr/bin/perl = MyQuiz Remote Command Execution Exploit - By Hessam-x / www.hackerz.ir manual exploiting -- http://target/cgi-bin/myquiz.pl/ask/;| SecurityFocus bug : http://www.securityfocus.com/archive/1/423921/30/0/threaded / | \ | | / \ \ / ...