2566 matches found
Commercial Interactive Media SCOOP! 2.3 - 'category.asp' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrar...
Web Shopper Remote File Retrieval Vulnerability - Active Check
Byte SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10533";...
Interactive Story (story.pl) < 1.4 Directory Traversal Vulnerability
Interactive Story story.pl is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2001 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Buffer Overrun in the ListBox and in the ComboBox (824141)
A vulnerability exists because the ListBox control and the ComboBox control both call a function, which is located in the User32.dll file, that contains a buffer overrun. An attacker who had the ability to log on to a system interactively could run a program that could send a specially-crafted...
Cabletron Web View Administrative Access (HTTP)
This host is a Cabletron switch and is running Cabletron WebView. This web software provides a graphical, real-time representation of the front panel on the switch. This graphic, along with additionally defined areas of the browser interface, allow you to interactively configure the switch, monit...
[SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 855-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...
efriends.txt
AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...
[SA15877] Avaya CMS/IR lpadmin Arbitrary File Overwrite Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Microsoft Step-by-Step Interactive Training buffer overflow
Buffer overflow on link files .cbo, .cbl, .cbm parsing...
iDEFENSE Security Advisory 06.14.05: Microsoft Windows Interactive Training Buffer Overflow Vulnerability
Microsoft Windows Interactive Training Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.14.05 www.idefense.com/application/poi/display?id=262&type=vulnerabilities June 14, 2005 I. BACKGROUND Microsoft Interactive Training is an application included with some OEM versions of Windows XP...
CVE-2005-1212
Buffer overflow in Microsoft Step-by-Step Interactive Training orun32.exe allows remote attackers to execute arbitrary code via a bookmark link file .cbo, cbl, or .cbm extension with a long User field...
CVE-2005-1212
CVE-2005-1212 is a buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe). A crafted bookmark link file with a long User field in extensions .cbo/.cbl/.cbm allows remote code execution, running with the caller’s privileges. The issue affects Step-by-Step Interactive Training ...
CVE-2005-1212: Undefined Security Weakness
Buffer overflow in Microsoft Step-by-Step Interactive Training orun32.exe allows remote attackers to execute arbitrary code via a bookmark link file .cbo, cbl, or .cbm extension with a long User field...
MS05-031: Vulnerability in Step-by-Step Interactive Training (898458)
The remote host is running a version of Microsoft Step-by-Step Interactive Training that contains a flaw that could lead to remote code execution. To exploit this flaw, an attacker would need to trick a user on the remote host into opening a malformed file with the affected application. C Tenable...
[SA15384] Avaya CMS/IR Network Port Hijacking Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Avaya CMS/IR Network Port Hijacking Vulnerability...
Avaya CMS (Call Management System) / IR (Interactive Response) multiple vulnerabilities
No description provided...
[SA15366] Avaya CMS/IR Xsun and Xprt Server Font Handling Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Avaya CMS/IR Xsun and Xprt Server Font Handling...
CVE-2005-0770
Format string vulnerability in DataRescue Interactive Disassembler and Debugger IDA Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service CPU consumption or application crash and possibly execute arbitrary code via format string specifiers in a dynamic link library DLL...
ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability
DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability by Piotr Bania [email protected] http://pb.specialised.info Severity: High / Medium - code execution. Versions affected: Probably all versions, however tested on 4.7.0.830. I. BACKGROUND "The IDA Pro Disassembler and...
DataRescue Interactive Disassembler Pro (IDA Pro disassembler/debugger) buffer overflow and format string bug
Buffer overflow on oversized inported library name, format string bug in library name...