660 matches found
Exploit for eTrust Antivirus Agent r8
No description provided by source. / ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions :...
[SA23640] FirePass URL Restriction Bypass Vulnerabilities
TITLE: FirePass URL Restriction Bypass Vulnerabilities SECUNIA ADVISORY ID: SA23640 VERIFY ADVISORY: http://secunia.com/advisories/23640/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: FirePass 5.x http://secunia.com/product/4695/ DESCRIPTION: Michael...
KLA10160 Multiple vulnerabilities in First Response
Multiple serious vulnerabilities have been found in First Response. Malicious users can exploit these vulnerabilities to cause denial of service or hijack user packets. Below is a complete list of vulnerabilities 1. Non-exclusive socket mode can be exploited locally; 2. Vectors related to FRAgent...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow PoC
No description provided by source. !/usr/bin/python Buffer Overflow Long transporting mode Vulnerability Exploit This is just a DoS exploiting code Tested on Windows xp SP2 Requires python and impacket Coded by Liu Qixu Of NCNIPC SUMMARY: 3CTftpSvc TFTP Server is a Freeware TFTP server for Window...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================ 3Com TFTP Service = 2.0.1 Long Transporting Mode Overflow PoC ================================================================ !/usr/bin/python Buffer Overflow Long transporting mod...
TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode)
TFTP Server 3CTftpSvc Buffer Overflow Vulnerability Long transporting mode ------------------------------------------------------------------ SUMMARY: 3CTftpSvc TFTP Server is a Freeware TFTP server for Windows 9x/NT/XP. http://support.3com.com/software/utilitiesforwindows32bit.htm or...
PHPWIND论坛存在严重安全隐患
PHPWIND论坛是一个采用 PHP 和 MySQL 等其他多种数据库构建的高效论坛解决方案。 PHPWIND存在严重安全隐患，会导致恶意用户可以得到论坛最高权限！ PHPWIND 4.3.2 – PHPWIND 5.0.0 Beta 暂未发布任何安全补丁。 请到官方下载最新版本。...
FreeBSD : coppermine -- Multiple File Extensions Vulnerability (0b628470-e9a6-11da-b9f4-00123ffe8333)
Secunia reports : Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious users to compromise a vulnerable system. The vulnerability is caused due to an error in the handling of file uploads where a filename has multiple file extensions. This can be exploited to upload...
Asterisk Recording Interface 0.7.15 - 'Audio.php' Information Disclosure
source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary MP3,...
SAXoPRESS - directory traversal
SAXoPRESS is a content management system, mainly used for news publishing. A vulnerability exists in SAXoPRESS, which allows malicious users to read the contents of files on the server, and possibly execute arbitrary commands. Example exploit:...
KLA10324 ACE vulnerability in Shareaza
Integer overflows were found in Shareaza. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Related products Shareaza CVE list CVE-2006-0474 high Solution Update to lates...
Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities
====================================================================== Secunia Research 27/12/2005 - IceWarp Web Mail Multiple File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
phgrafx.txt
a buffer overflow vulnerability in the utility "phgrafx" included in the QNX Neutrino Realtime Operating System can potentially be exploited by malicious users to escalate their privileges by default the application is suid and owned by root. example: qnx$ uname -a; id QNX qnx 6.3.0...
[SA16362] cPanel Password Change Privilege Escalation Security Issue
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[SECURITY] [DSA 751-1] New squid packages fix IP spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 751-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...
Debian DSA-751-1 : squid - IP spoofing
The upstream developers have discovered a bug in the DNS lookup code of Squid, the popular WWW proxy cache. When the DNS client UDP port assigned by the operating system at startup is unfiltered and the network is not protected from IP spoofing, malicious users can spoof DNS lookups which could...
KLA10048 DoS vulnerability in AOL AIM
An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...
FUSE 2.2/2.3 - Local Information Disclosure
// source: https://www.securityfocus.com/bid/13857/info FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows malicious local users to gain access to...
phpBB contains an input validation vulnerability in "includes/bbcode.php"
Overview phpBB fails to sanitize user input, allowing the possible inclusion of active script content in user posts. Description phpBB is a widely used Open Source bulletin board package written in PHP.An input validation issue has been identified that allows a malicious phpBB user to include...
[SA14016] CoolForum Two Vulnerabilities
TITLE: CoolForum Two Vulnerabilities SECUNIA ADVISORY ID: SA14016 VERIFY ADVISORY: http://secunia.com/advisories/14016/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: CoolForum v0.x http://secunia.com/product/401/ DESCRIPTION: benjilenoob h...