Limbo CMS <=1.0.4.2 XSS

Limbo CMS =1.0.4.2 XSS 2005-10-03 12:37:28 bugtaq at lol dot lt Vulnerability type: Permanent XSS Risk: Moderate A malicious HTML tag can be injected through the Contact menu form. A PM can be send, which will later be red by admins. E.g.: scriptalertdocument.cookie/script Information was provide...

Microsoft Windows win32k.sys DoS

WMCLOSE event for active drop-down menu causes system to crash...

bsod in win32k.sys(Multi-User Win32 Driver)

Hello vuln, OS: Microsoft Windows XP, SP2, other not tested VULNERABILITY: file : win32k.sys version : 5.1.2600.2180 xpspsp2rtm.040803-2158 description : Multi-User Win32 Driver author : 6star aka mg BUG DESCRIPTION: When you try HOW TO CHECK: 1. Click on Desktop to call Context Menu. 2. Then...

sphpblog_vulns.pl.txt

!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...

Vulnerability in Helpdesk software Hesk 0.92

By The Name Of Allah Vulnerability in Helpdesk software Hesk .. Vulnerability Type : Login into The Administrator Menu With out Password Injected version : Helpdesk software Hesk 0.92 Vulnerability Example http://www.springporttwppd.com/helpdesk/ add : admin.php...

CVE-2005-2262

The CVE-2005-2262 issue affects Firefox 1.0.3/1.0.4 and Netscape 8.0.2, where a user-initiated Set As Wallpaper/Set as Background on an image URL containing a javascript: URL with an eval could allow remote code execution. OpenVAS/OSV entries and Debian/Red Hat advisories reference this set of Fi...

CVE-2005-2262

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" in Firefox or "Set as Background" in Netscape context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewallin...

CVE-2005-2262

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" in Firefox or "Set as Background" in Netscape context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewallin...

DEBIAN-CVE-2005-2110

WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via 1 a direct request to menu-header.php or a "1" value in the feed parameter to 2 wp-atom.php, 3 wp-rss.php, or 4 wp-rss2.php, which reveal the path in an error message. NOTE: vector 1 was later reported to al...

CVE-2005-2110: Undefined Security Weakness

WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via 1 a direct request to menu-header.php or a "1" value in the feed parameter to 2 wp-atom.php, 3 wp-rss.php, or 4 wp-rss2.php, which reveal the path in an error message. NOTE: vector 1 was later reported to al...

CarLine Forum Russian Board 4.2 - 'menu_header.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 is reported to be affected...

CVE-2002-1731

Technical details about CVE-2002-1731 are not publicly available in the provided documents. Monitor for updates in connected sources for affected products, root cause specifics, and remediation guidance.

CVE-2002-1731

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF...

CVE-2002-1731: Undefined Security Weakness

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF...

CVE-2005-1372

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

CVE-2005-1372

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

CVE-2005-1371: Undefined Security Weakness

BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges...

CVE-2005-1372: Undefined Security Weakness

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

CVE-2004-1549: Undefined Security Weakness

The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection...

Security fix for the ALT Linux 9 package wireshark version 0.10.9-alt1

Jan. 22, 2005 Sir Raorn 0.10.9-alt1 - 0.10.9 - Fixed: + CAN-2004-1139 + CAN-2004-1140 + CAN-2004-1141 + CAN-2004-1142 + CAN-2005-0006 + CAN-2005-0007 + CAN-2005-0008 + CAN-2005-0009 + CAN-2005-0010 + CAN-2005-0084 - Debian fixes: Fixed dissectcmipInvokeIDType declaration FTBFS with gcc-4.0...