CVE-2003-1583: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption ILLC" issue...

CVE-2003-1585: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption ILLC" issue...

CVE-2003-1580: Undefined Security Weakness

The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-lev...

Quick Player v1.2 Unicode Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Vulnerability : Quick Player v1.2 unicode buffer overflow exploit coded by : mrme reference : http://www.exploit-db.com/exploits/10759 corelanc0d3r Tested on : XP SP3 En VirtualBox Greetz to : Corelan Security...

IP Address Finder XSS Vulnerability

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + IP Address Finder XSS Vulnerability // Author Info x Author: bi0 x Contact: [email protected] x Homepage...

SuSE9 Security Update : perl-Net-DNS (YOU Patch Number 11702)

perl-Net-DNS uses sequential IDs for DNS lookups which could cause problems with some programs like spamassassin. It potentially also simplifies DNS spoofing attacks against perl-Net-DNS. CVE-2007-3377 Additionally, malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter to user.php or 2 lookup parameter to search.php...

CVE-2009-3171

Multiple cross-site scripting XSS vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter to user.php or 2 lookup parameter to search.php...

CVE-2009-3171

Multiple cross-site scripting XSS vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter to user.php or 2 lookup parameter to search.php...

DEBIAN-CVE-2008-7185

GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service segmentation fault and crash via a playlist .pls file with a long Title field, possibly related to the ghashtablelookup function in b-playlist-manager.c...

[SECURITY] Fedora 10 Update: squid-3.0.STABLE18-1.fc10

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

kernel: nfsv4 client can be crashed by stating a long filename

fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service OOPS via a long filename, related to the encodelookup function...

kernel: nfsv4 client can be crashed by stating a long filename

fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service OOPS via a long filename, related to the encodelookup function...

To quickly locate website source code-bug warning-the black bar safety net

In practice we often face such a dilemma: we felt that the target site uses a set of open source code, but by the webmasters of the pages of the modified obliterate the ability to directly access this source The name of the dominant logo. This our hack is obviously unfavorable, we may in order to...

CS Whois Lookup 'ip' Parameter Remote Command Execution Vulnerability

CS Whois Lookup and CS DNS Lookup are prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer. OpenVAS Vulnerability Test $Id: cswhois34700.nasl 5771...

CS Whois Lookup RCE Vulnerability (Apr 2009) - Active Check

CS Whois Lookup and CS DNS Lookup are prone to a remote command execution RCE vulnerability because the software fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CS Whois Lookup Command Execution

CS Whois Lookup index.php ip Remote Command Execution Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Download : http://www.hotscripts.com/listings/jump/download/84580/ + Remote Command Execution Vulnerable code in index.php -----------------------------------------...

CS Whois Lookup - ip Remote Command Execution

CS Whois Lookup - ip Remote Command Execution source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software an...

CS Whois Lookup - 'ip' Remote Command Execution

source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer...

Mandriva Linux Security Advisory : autofs (MDVSA-2008:009-1)

The default behaviour of autofs 5 for the hosts map did not specify the nosuid and nodev mount options. This could allow a local user with control of a remote NFS server to create a setuid root executable on the exported filesystem of the remote NFS server. If this filesystem was mounted with the...