2060 matches found
fipsCMS light - vulnerable to script injection.
fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system. If you inject the "headline" field with scriptingcode like scriptalert‘code executed’/script, this will automaticly launch when a users visits that site. Please credit to:...
PHP-Nuke 7.8 - SQL Injection / Remote Command Execution
?php 20.05 23/10/2005 ---phpnuke78xpl.php PHPNuke 7.8 with all security fixes/patches "Downloads","WebLinks" & "YourAccount" modules SQL Injection / remote commands execution exploit yet not tested 7.9, but OK... by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...
CVE-2005-2948
KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are not all killed by KillProcess...
CVE-2005-2948
KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are not all killed by KillProcess...
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution software: site: http://www.digital-scribe.org/ description: "Teachers have full control through a web-based interface. Designed for easy installation and even easier use, the Digital Scribe has been used in thousands of...
DEBIAN-CVE-2005-2772
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via 1 a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and 2 certain arguments when launching third party programs such as...
CVE-2005-1970
Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature...
iDEFENSE Security Advisory 06.14.05: Multiple Vendor Telnet Client Information Disclosure Vulnerability
Multiple Vendor Telnet Client Information Disclosure Vulnerability iDEFENSE Security Advisory 06.14.05 www.idefense.com/application/poi/display?id=260&type=vulnerabilities June 14, 2005 I. BACKGROUND The TELNET protocol allows virtual network terminals to be connected to over the internet. The...
Altris deployment solution AClient privilege escalation
It's possible to launch executable with LocalSystem privileges...
MacOS X Privilege escalation
It's possible to launch application before logon...
Courier-IMAP <= 3.0.2-r1 auth_debug() Remote Format String Exploit
No description provided by source. / courier-imap = 3.0.2-r1 Remote Format String Vulnerability exploit Author: ktha at hush dot com Tested on FreeBSD 4.10-RELEASE with courier-imap-3.0.2 Special thanks goes to andrewg for providing the FreeBSD box. Greetings: all the guys from irc pulltheplug co...
Executable launch via Windows Medial Player from Microsoft Outlook/Outlook express
Via Windows Media file wma it's possible to open HTML file in local security zone, from html it's open chm, from chm - executable...
Обход защиты Identix Bio Logon 3 (protection bypass)
Имеется возможность запустить приложение до входа пользователя...
Обход защиты от запуска приложений с помощью Internet Explorer в MacOS (protection bypass)
Можно запустить запрещенное приложение установи его для обработки определенного типа URL...
Citrix Client Access Verification
Your professional opinions are appreciated. About a month ago I had posted the below as a Citrix Client Access Advisory and got several responses to the fact that it either it was not a valid vulnerabilty or that it was a default configuration problem. which may be true. but consider this. The...
CVE-1999-1206: Undefined Security Weakness
SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references 1 the...
CVE-2000-0787: Undefined Security Weakness
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...
Linux news 27.09.00
Linux 2.2.18pre2aa2 Andrea Arcangeli выпустил следующую версию своей модификации ядра Linux для high-end серверов. Патч содержит поддержку до 4Gb памяти на платформе Intel, поддержку до 2Tb памяти на Alpha, улучшения VM для машин с большим объемом оперативки, Raw IO, улучшения SMP планировщика,...
