CVE-2007-2367

Buffer overflow in wserveconsole.exe in Wserve HTTP Server whttp 4.6 allows remote attackers to cause a denial of service forced application exit via a long directory name in the URI...

security flaw

The iptrecent kernel module iptrecent.c in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONGMAX, which can cause iptrecent netfilter rules to block too early, a different vulnerability than CVE-2005-2872...

MyBulletinBoard <= 1.2.5 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard = 1.2.5 Remote SQL Injection Exploit \n"; print " Bug found and Exploit coded by 0x86 \n"; print " &nbsp...

MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard \n"; print " Example: perl mybb.pl www.host.com /mybb/ -u 5 \n"; print " \n"; print " Options: \n"; print " -u User-ID, default: 1 \n"; print " -p Proxy support \n"; print " \n"; exit;...

CVE-2007-2163

Apple Safari allows remote attackers to cause a denial of service browser crash via JavaScript that matches a regular expression against a long string, as demonstrated using /./...

CVE-2007-2164

Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service browser crash or abort via JavaScript that matches a regular expression against a long string, as demonstrated using /./...

CVE-2007-2161

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service browser hang via JavaScript that matches a regular expression against a long string, as demonstrated using /./...

CVE-2007-2163

Apple Safari allows remote attackers to cause a denial of service browser crash via JavaScript that matches a regular expression against a long string, as demonstrated using /./...

Buffer overflow

Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte Unicode characters...

CVE-2007-2152

Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte Unicode characters...

CVE-2007-2152

Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte Unicode characters...

CVE-2007-2059

Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer ESA 2.5 allow remote attackers to execute arbitrary code via a long parameter to the 1 DELETESEARCHFOLDER, 2 DELTASK, 3 HMGRCHECKHOSTSCSV, 4 TASKUPDATEDUSER, 5 VERIFYUSERKEY, or 6 VERIFYPWD...

CVE-2007-2062

Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE argument in a CUE file...

msdns_zonename.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

Joomla! / Mambo Component Taskhopper 1.1 - Remote File Inclusion

================================================== Joomla/Mambo Component Taskhopper 1.1 /inc/ mosConfigabsolutepath RFI ================================================== Found By : Cold z3ro , [email protected] ================================================== Homepage: www.Hack-Teach.com...

Wserve HTTP Server 4.6 Version (Long Directory Name) Buffer Overflow - Denial Of Service

!-- Wserve HTTP Server 4.6 Version Long Directory Name Buffer Overflow - Denial Of Service Type : Buffer Overflow - Denial of Service Release Date : 2007-04-05 Product / Vendor : Wserve HTTP Server http://sourceforge.net/projects/whttp -- GET / HTTP/1.0rn /127.0.0.1:80/AAAAAA2000. !-- Error :...

CVE-2007-1889

Integer signedness error in the zendmmallocint function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msgreceive wi...

CVE-2007-1825

Buffer overflow in the imapmailcompose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3...

CVE-2007-1772

The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service engine crash via a RETR command with a long pathname...

CVE-2007-1733

Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long 1 /cgi-bin/ or 2 /cgi/ pathname in an HTTP GET request, probably a different issue than CVE-2006-5112...