3145 matches found
fx-APP Version 0.0.8.1
fx-APP Version 0.0.8.1 Homepage: http://fx-app.org/ Effected files: search input box index.cgi input boxes on your profile adding a menu item ------------------------------------------------------- I noticed there was already several BID's on the a script WebAPP:...
Code injection
Finder in Apple Mac OS X 10.3.9 and 10.4.6 allows user-assisted attackers to execute arbitrary code by tricking a user into launching an Internet Location item that appears to use a safe URL scheme, but which actually has a different and more risky scheme...
philbookmark.txt
From: [email protected] Subject: Phil's Bookmark script admin By-pass google dork : "Phil's Bookmark" and lasth path add to "admin.php?edit=item id" example: www.site.com/bookmarks/admin.php?edit=1 www.ayyildiz.org...
MuOnline Loopholes Web Server - 'pkok.asp' SQL Injection
milw0rm.com 2005-10-15...
security flaw
Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...
CVE-2005-1631
booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...
CVE-2005-1631
booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...
CVE-2005-1502
Cross-site scripting XSS vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 searchstring parameter to searchlist.php or the 2 secondgroup or 3 maingroup parameters to itemlist.php...
CVE-2005-1460
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...
CVE-2005-1460
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...
PT-2005-2456 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue allows remote attackers to cause a denial of service via an invalid protocol tree item length, resulting in an assert error. This is due to multiple unknown dissectors in the affected...
CVE-2005-1364
Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password fields in logIn.asp, or 3 intAuctionID parameter to item.asp...
Solaris 9 (x86) : 114435-16
SunOS 5.9x86: IKE patch. Date this patch was last updated by Sun : Aug/09/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
SHGetPathFromIDList.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Windows Api SHGetPathFromIDList Buffer Overflow To all those people who sent email to us asking for more information about the SHGetPathFromIDList Windows Api overflow. Here is a more specific description about the problem. All Structure lengths, or...
MS:B59F05D3-ED75-4F71-85A0-7598826104F6
...
MS:289B9D81-AB69-474A-A3DC-9841C3F837AB
...
MS:161D50BA-D400-4504-9727-CC94B047414C
...
MS:6F847FB0-73CC-4539-9E01-3CE97C343703
...