1610 matches found
Dust on the network enterprise website management system vulnerability-vulnerability warning-the black bar safety net
company. asp a get way to get the variable id's value is only filtered spaces and judgment Whether the value is empty contains an anti-note only the filter get way to pass the incoming parameter value company. asp it is request. querystring"id" that is not using the post And cookie injection but...
The times-the level of WEP crack full power slightly-vulnerability warning-the black bar safety net
With the rapid development of network technology and network applications, more and more, many users began to focus on network security. Believe the wired network to the wireless network in terms of security there is inherent, since the communication medium is a wireless signal, so the intruder c...
CVE-2008-4395
Removed by vendor...
CVE-2008-3613
CVE-2008-3613 affects Finder in Apple Mac OS X 10.5.2–10.5.4. The vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a search for a remote disk on the local network. The NVD entry records a base CVSS v2 score of 6.1 (M...
xeroxphaser-dos.txt
!/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an empty packet to a Xerox Phaser 8400...
NX: User-assisted execution of arbitrary code
Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Multiple integer overflow and buffer overflow vulnerabilities...
Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006
Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bugs: A IPureServer::Recieve buffer-overflow B NETCompressor::Decompress integer overflow C MultipacketReciever::RecievePacket INT3 Exploitation: remote, versus server...
USN-610-1: LTSP vulnerability
Christian Herzog discovered that it was possible to connect to any LTSP client's X session over the network. A remote attacker could eavesdrop on X events, read window contents, and record keystrokes, possibly gaining access to private information...
DSA-1561-1 ltsp - information disclosure
Bulletin has no description...
wireshark HTTP dissector flaws
Unspecified vulnerability in the HTTP dissector for Wireshark formerly Ethereal 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted chunked messages...
[CSNC] OKI C5510MFP Printer Password Disclosure
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: OKI C5510MFP Printer Vendor: OKI Printing Solutions http://www.okiprintingsolutions.com/ Subject: Printer Reveals Password / Password and the configuration can be altered without authentication Risk: High Effect: Remotely exploitable Author:...
CVE-2007-6682
Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter...
Stack overflow
Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long string in a .M3U file. NOTE: some of these details are obtained from third party information...
Zoidcom 0.6.x - Malformed Packet Denial of Service
// source: https://www.securityfocus.com/bid/25326/info The Zoidcom network library is prone to a denial of service vulnerability when handling malformed packets. An attacker could exploit this to crash a network service that is implemented with the library. / by Luigi Auriemma / include include...
USN-405-1: fetchmail vulnerability
It was discovered that fetchmail did not correctly require TLS negotiation in certain situations. This would result in a user's unencrypted password being sent across the network. If fetchmail has been configured to use the "sslproto tls1", "sslcertck", or "sslfingerprint" options with a server...
Province College entrance examination volunteer fill reporting system vulnerabilities-vulnerability warning-the black bar safety net
| Compiled by: education system of the College entrance examination......that Online fill volunteer to facilitate the majority of candidates, but the security on the negligence and vulnerability can also increase a lot of unnecessary trouble, this is to remind educators, Safety first. The provinc...
CVE-2006-2411
Buffer overflow in raydiumnetworkread function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to execute arbitrary code by sending packets with long global variables to the client...
New ideas now move the new network vulnerability-vulnerability warning-the black bar safety net
Article author: yogurtGXU the www.wuzhou.org) Information source: evil octal information security team www.eviloctal.com) The original download: http://www.wuzhou.org/dvbbs.doc Some time ago focn, who found the Action Network to mention the right vulnerability, this vulnerability but much noise...
BomberClone: Remote execution of arbitrary code
Background BomberClone is a remake of the classic game "BomberMan". It supports multiple players via IP network connection. Description Stefan Cornelius of the Gentoo Security team discovered multiple missing buffer checks in BomberClone's code. Impact By sending overly long error messages to the...
CiscoPhoneDos.pl.txt
!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! use Net::RawIP; use Time::HiRes; $pkt = new Net::RawIP...