Joomla! Component ownbiblio 1.5.3 - 'catid' SQL Injection

Joomla Component Ownbiblio SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Ownbiblio comownbiblio" Version: "1.5.3"...

Personal FTP Server RETR Command Remote Denial of Service Vulnerability

The host is running Personal FTP Server, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodpersonalftpserverdosvuln900127.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Personal FTP Server RETR Command Remote Denial of Service Vulnerability Authors: Shara...

CVE-2008-4136

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

Design/Logic Flaw

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

CVE-2008-4136

CVE-2008-4136 affects Michael Roth Software Personal FTP Server (PFT) 6.0f. Web and OpenVAS/NVD records describe a remote denial-of-service condition caused by handling multiple RETR commands, potentially with long filenames, leading to a service crash. Exploitation details are not provided beyon...

CVE-2008-4136

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

Unfixed XSS vulnerability at www.avery.com

Security researcher Michael Ansel, has submitted on 23/04/2008 a cross-site-scripting XSS vulnerability affecting www.avery.com, which at the time of submission ranked 14808 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...

Unfixed XSS vulnerability at home.proflowers.com

Security researcher Michael Ansel, has submitted on 23/04/2008 a cross-site-scripting XSS vulnerability affecting home.proflowers.com, which at the time of submission ranked 7479 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...

Unfixed XSS vulnerability at www.phrozen.biz

Security researcher Michael Ansel, has submitted on 22/04/2008 a cross-site-scripting XSS vulnerability affecting www.phrozen.biz, which at the time of submission ranked 7618089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...

Cross site scripting

Cross-site scripting XSS vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script or HTML via the baseDir parameter...

Unfixed XSS vulnerability at www.michaelpollan.com

Security researcher Stacker, has submitted on 02/11/2008 a cross-site-scripting XSS vulnerability affecting www.michaelpollan.com, which at the time of submission ranked 267240 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.odesk.com

Security researcher Michael Ansel, has submitted on 02/05/2008 a cross-site-scripting XSS vulnerability affecting www.odesk.com, which at the time of submission ranked 7483 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

GLSA-200801-16 : MaraDNS: CNAME Denial of Service

The remote host is affected by the vulnerability described in GLSA-200801-16 MaraDNS: CNAME Denial of Service Michael Krieger reported that a specially crafted DNS could prevent an authoritative canonical name CNAME record from being resolved because of an 'improper rotation of resource records'...

MaraDNS: CNAME Denial of service

Background MaraDNS is a package that implements the Domain Name Service DNS with resolver and caching ability. Description Michael Krieger reported that a specially crafted DNS could prevent an authoritative canonical name CNAME record from being resolved because of an "improper rotation of...

America Online AOL Instant Messenger AIM6.0 or 6.5 or higher XSS remote execution

Sorry for the brief post but Im still able to bypass filters that aol has put in place. So again with frustration I come to FD to imply pressure on a company to patch correct. From reading feedback from AOL they feel the vulnerability is put to bed and requires no more attention. I am not posting...

DSA-1429-1 htdig - cross site scripting

Bulletin has no description...

Ubuntu 6.10 : postgresql-8.1 vulnerabilities (USN-369-2)

USN-369-1 fixed three minor PostgreSQL 8.1 vulnerabilities for Ubuntu 6.06 LTS. This update provides the corresponding update for Ubuntu 6.10. Michael Fuhr discovered an incorrect type check when handling unknown literals. By attempting to coerce such a literal to the ANYARRAY type, a local...

CVE-2007-5457

CVE-2007-5457: Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 is affected by multiple PHP remote file inclusion vulnerabilities. The root cause is improper handling of the mosConfig_absolute_path parameter, enabling an attacker to specify a URL to install.joomla_flash_uploader...

CVE-2001-1584

The CVE-2001-1584 entry concerns CardBoard 2.4 greeting card CGI by Michael Barretto. The affected component is the CardBoard 2.4 greeting card CGI, where the recipient field can be exploited via shell metacharacters to execute arbitrary commands remotely. The root cause is improper handling of s...

Sophos Anti-Virus 6.5.4 Vulnerability

Name Cross Site Scripting Vulnerability in Sophos Anti-Virus Systems Affected Sophos Anti-Virus, version 6.5.4 R2 Severity Medium Category Cross Site Scripting Author Context Information Security Ltd Advisory 6th September 2007 Description ----------- A ZIP archive containing a virus signature wi...