CVE-2006-0843

CVE-2006-0843 affects Leif M. Wright's Blog 3.5. The vulnerability arises from storing the config file and other text files under the web root with insufficient access control, allowing remote attackers to read the administrator’s password. This is a remote access issue tied to web-root plaintext...

CVE-2006-0843

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password...

CVE-2006-0846

Multiple cross-site scripting XSS vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Referer and 2 User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the "Log" page, possibly usin...

CVE-2006-0845

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname...

[SA18923] Leif M. Wright's Blog Multiple Vulnerabilities

TITLE: Leif M. Wright's Blog Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18923 VERIFY ADVISORY: http://secunia.com/advisories/18923/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Leif M...

CVE-2006-0738

Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service hang via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using 1 the field name, 2 the o field owner/creator and session identifier,...

EV0080.txt

New eVuln Advisory: M. Blom HTML::BBCode perl module XSS Vulnerabilities http://evuln.com/vulns/80/summary.html --------------------Summary---------------- eVuln ID: EV0080 Software: M. Blom HTML::BBCode Sowtware's Web Site: http://menno.b10m.net/perl/ Versions: 1.04 1.03 and earlier Critical...

CVE-2006-0735

Cross-site scripting XSS vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an 1 img or 2 url BBcode tag...

[SA18818] Isode M-Vault Server LDAP Vulnerability

TITLE: Isode M-Vault Server LDAP Vulnerability SECUNIA ADVISORY ID: SA18818 VERIFY ADVISORY: http://secunia.com/advisories/18818/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Isode M-Vault 11.x http://secunia.com/product/8065/ DESCRIPTION: Evgeny...

[eVuln] M. Blom HTML::BBCode perl module XSS Vulnerabilities

New eVuln Advisory: M. Blom HTML::BBCode perl module XSS Vulnerabilities http://evuln.com/vulns/80/summary.html --------------------Summary---------------- eVuln ID: EV0080 Software: M. Blom HTML::BBCode Sowtware's Web Site: http://menno.b10m.net/perl/ Versions: 1.04 1.03 and earlier Critical...

CVE-2006-0710

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP...

Double free

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP...

CVE-2006-0710

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP...

CVE-2006-0710

CVE-2006-0710 describes a double-free vulnerability in isode.eddy within Isode M-Vault Server 11.3. The vulnerability occurs in LDAP request handling, enabling remote code execution as demonstrated by a ProtoVer Sample LDAP payload. The affected component is Isode M-Vault Server 11.3; the root ca...

Isode M-Vault Server 11.3 - LDAP Memory Corruption

source: https://www.securityfocus.com/bid/16635/info Isode M-Vault Server is prone to a memory corruption. This issue may be triggered by malformed LDAP data. The exact impact of this vulnerability is not known at this time. Although the issue is known to crash the server, the possibility of remo...

Isode M-Vault Server 11.3 - LDAP Memory Corruption

Isode M-Vault Server 11.3 - LDAP Memory Corruption source: https://www.securityfocus.com/bid/16635/info Isode M-Vault Server is prone to a memory corruption. This issue may be triggered by malformed LDAP data. The exact impact of this vulnerability is not known at this time. Although the issue is...

[SA18521] AOL You've Got Pictures ActiveX Control Buffer Overflow

TITLE: AOL You've Got Pictures ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA18521 VERIFY ADVISORY: http://secunia.com/advisories/18521/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: AOL 8.x http://secunia.com/product/6839/ AOL 9.x Classic...

PT-2005-5482 · Unknown · Land Down Under

Name of the Vulnerable Software and Affected Versions: Land Down Under LDU versions v801 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via parameters including 1 the m parameter in "auth.php", 2 the f parameter in "events.php", ...

CVE-2005-3733

The Internet Key Exchange version 1 IKEv1 implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as...

[SA17568] Juniper JUNOS/JUNOSe ISAKMP IKE Message Processing Denial of Service

TITLE: Juniper JUNOS/JUNOSe ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17568 VERIFY ADVISORY: http://secunia.com/advisories/17568/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: JUNOSe 7.x http://secunia.com/product/6108/ JUNOSe 6.x...