5623 matches found
CVE-2006-2225
Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...
[REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability
REWTERZ-20060503 - XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability Release Date: May 3, 2006 Severity: High Remote Code Execution Vendor: Dxmsoft Software Affected: XM Easy Personal FTP Server v4.3 and before Operating Systems Affected: Windows NT 4.0 Windows 98 / ME Windows 2000...
XM Easy Personal FTP Server 4.3 - USER Remote Buffer Overflow (PoC)
XM Easy Personal FTP Server 4.3 - USER Remote Buffer Overflow PoC XM EASY PERSONAL FTP SERVER v4.3 http://www.securityfocus.com/archive/1/432960/30/0/threaded Buffer Overflow Vulnerability PoC [email protected] import socket import struct import time import sys buff='USER '+'A'5000+'\r\n' if...
XM Easy Personal FTP Server <= 4.3 (USER) Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ==================================================================== XM Easy Personal FTP Server \n" %sys.argv0 sys.exit0 try: print "+ Connecting to %s" %sys.argv1 s=socket.socketsocket.AFINET, socket.SOCKSTREAM...
XM Easy Personal FTP Server 4.3 - 'USER' Remote Buffer Overflow (PoC)
XM EASY PERSONAL FTP SERVER v4.3 http://www.securityfocus.com/archive/1/432960/30/0/threaded Buffer Overflow Vulnerability PoC [email protected] import socket import struct import time import sys buff='USER '+'A'5000+'\r\n' if lensys.argv!=3: print "+ Usage: %s \n" %sys.argv0 sys.exit0 try: print...
Design/Logic Flaw
The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...
CVE-2006-1948
The CVE-2006-1948 entry affects IBM Lotus Notes 6.0 and 6.5 before 20060331. The issue stems from AddSenderToAddressBook.lss and NameHelper.lss not storing information in the Personal Address Book when multiple messages are selected and a message uses AltFrom, enabling user-assisted remote attack...
CVE-2006-1948
The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...
JVN#78363061 CAFEMILK Shopping Cart CGI cross-site scripting vulnerability
Impact A malicious script may be executed on the user's web browser. Personal information, recorded in cookies issued by CAFEMILK SHOPPING CART CGI, may be leaked. Solution Products Affected CAFEMILK SHOPPING CART version 3.80 and earlier...
XM Easy Personal FTP Server 1.0 - Port Remote Overflow (PoC)
XM Easy Personal FTP Server 1.0 - Port Remote Overflow PoC !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT valu...
XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC
Exploit for unknown platform in category dos / poc ========================================================== XM Easy Personal FTP Server 1.0 Port Remote Overflow PoC ========================================================== !/usr/bin/perl ---------------------------------------------------- Nam...
XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC
No description provided by source. !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT value...
Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow (Metasploit)
Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same licens...
Kerio Personal Firewall <= 2.1.4 Remote Authentication Packet Overflow
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Design/Logic Flaw
Unquoted Windows search path vulnerability in 1 snsmcon.exe, 2 the autostartup mechanism, and 3 an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a...
[SA18876] Teca Diary Personal Edition SQL Injection Vulnerability
TITLE: Teca Diary Personal Edition SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18876 VERIFY ADVISORY: http://secunia.com/advisories/18876/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Teca Diary Personal Edition 1.x http://secunia.com/product/8089...
TiVo Detection
The remote host is a TiVo, a personal video recorder. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20813; scriptversion"1.13"; scriptcvsdate"Date: 2019/11/22"; name"english" = "TiVo Detection"; scriptnameenglish:name"english"; scriptsetattributeattribute:"synopsis"...
VPNcheckpoint.txt
Situation: Employees should be allowed to access your company network from remote by VPN. You want to make sure, that only the hardware of your own company is allowed to access the network on the VPN. This because your company hardware uses a hardened operating system personal firewall,...
CVE-2005-4177
The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...
CVE-2005-4071
Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ForumID parameter in viewforum.cfm, and 2 ForumID, 3 Thread, and 4 ThreadID parameters in viewthread.cfm...