4396 matches found
CVE-2007-0611
Multiple cross-site scripting XSS vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 inc.page.php and 2 inc.text.php...
CVE-2007-0611
The CVE-2007-0611 entry describes XSS vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2, exploitable via unspecified vectors in the files inc.page.php and inc.text.php. Affected component: FLIP web portal. Impact is the ability to inject arbitrary web script/HTML in the cont...
CVE-2007-0611
Multiple cross-site scripting XSS vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 inc.page.php and 2 inc.text.php...
CVE-2007-0611: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 inc.page.php and 2 inc.text.php...
avm-traversal.txt
Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...
CVE-2006-6728
Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...
CVE-2006-6728
Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...
CVE-2006-6728
CVE-2006-6728 describes an unspecified vulnerability in the info request mechanism of LAN Messenger prior to 1.5.1.2. The flaw allows remote attackers to cause a denial of service (application crash) or to transmit spam via unspecified vectors. Documents consistently cite the same description acr...
CVE-2006-6728: Undefined Security Weakness
Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...
flash plug-horse technology-vulnerability warning-the black bar safety net
Recently in a foreign country on the website to see an article about Backdooring Flash Objects the walkthroughof the article, the translation test a bit First class Backdoor function Backdoor static function mainmc getURL"javascript:alert'hello from backdoor'"; As the initial script, written in...
MadWifi: Kernel driver buffer overflow
Background MadWifi Multiband Atheros Driver for Wireless Fidelity provides a Linux kernel device driver for Atheros-based Wireless LAN devices. Description Laurent Butti, Jerome Raznieski and Julien Tinnes reported a buffer overflow in the encodeie and the giwscancb functions from...
Hacker attack and Defense of the PPPoE authentication and use-vulnerability and early warning-the black bar safety net
A Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed explosive growth, the operators in the use of xDSL, LAN, HFC, wireless and other access methods at the same time, in order to build an operable, manageable and profitable broadband network, is very...
CVE-2006-5920: Undefined Security Weakness
PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter. NOTE: SecurityFocus disputes this issue, saying "further analysis reveals that the application is not vulnerable." NOTE: thi...
PT-2006-6587 · Exporia · Exporia
Name of the Vulnerable Software and Affected Versions: Exporia version 0.3.0 Description: A remote file inclusion issue in common.php allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter. However, it's noted that further analysis by SecurityFocus disputes this issu...
CVE-2006-4773
Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service controller reboot via a flood of traffic on the LAN...
CVE-2006-4773
Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service controller reboot via a flood of traffic on the LAN...
CVE-2006-4773: Undefined Security Weakness
Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service controller reboot via a flood of traffic on the LAN...
assp.txt
Anti-Spam SMTP Proxy ASSP "get?file" Traversal Vulnerability Release Date: August 15, 2006 Notice: This is a known flaw, and has been since the implementation of an enhanced web interface for ASSP, since at least 2003. I do not normally test for security vulnerabilities or address them directly,...
Hacking techniques: local area network sniffing and monitoring-vulnerability warning-the black bar safety net
A. Who peek at my blog Inspector small Jie grew up with the habit of writing diary, after graduation on the job did not change, regardless of work how busy tired, every night near bedtime she will always put today's happenings into the recording diary, for example some problems at work, mood, ide...
D-Link Router UPNP Stack Overflow
D-Link Router UPNP Stack Overflow Release Date: July 13, 2006 Date Reported: February 27, 2006 Patch Development Time In Days: 136 Severity: High Remote Code Execution Vendor: D-Link Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A...