GLSA-200503-34 : mpg321: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-34 mpg321: Format string vulnerability A routine security audit of the mpg321 package revealed a known security issue remained unpatched. The vulnerability is a result of mpg321 printing embedded ID3 data to the console in ...

HP-UX PHSS_29547 : HPSBUX0310-285 SSRT3642 Potential Security Vulnerabilities Apache web server HP-UX VVOS and Webproxy.

s700800 11.04 Webproxy server 2.0 update : 1. Potential Apache web server crash when it goes into an infinite loop due to too many subsequent internal redirects and nested subrequests. VU379828 2. No de-allocation of file descriptors while servicing CGI scripts through child processes...

HP-UX PHSS_29545 : HPSBUX0310-285 SSRT3642 Potential Security Vulnerabilities Apache web server HP-UX VVOS and Webproxy.

s700800 11.04 Virtualvault 4.5 OWS update : 1. Potential Apache web server crash when it goes into an infinite loop due to too many subsequent internal redirects and nested subrequests. VU379828 2. No de-allocation of file descriptors while servicing CGI scripts through child processes...

CERN httpd CGI Name Handling Remote Overflow

The remote web server stopped responding after sending it a GET request for a CGI script with a arbitrary long file name. This is known to trigger a heap overflow in some servers like CERN HTTPD. An attacker may use this flaw to disrupt the remote service and possibly even run malicious code on t...

OOApp Guestbook - Multiple HTML Injection Vulnerabilities

OOApp Guestbook - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12647/info OOApp Guestbook is reportedly affected by multiple HTML injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input. The...

SUSE-SA:2005:008: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:008 squid. Squid is an Open Source web proxy. A remote attacker was potentially able to crash the Squid web proxy if the logfqdn option was set to 'on' and the DNS replies were manipulated. This is tracked by the Mitre CVE ID...

HP-UX Security patch : PHNE_28760

The remote host is missing HP-UX Security Patch number PHNE28760 . SSRT3531 Potential Security Vulnerability in sendmail rev.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16580;...

HP-UX Security patch : PHCO_28717

The remote host is missing HP-UX Security Patch number PHCO28717 . SSRT3483 Potential Security Vulnerability in wall1M command rev.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated Squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. Jimmy Conner...

AWStats 5.x/6.x - Debug Remote Information Disclosure

source: https://www.securityfocus.com/bid/12545/info A remote information disclosure vulnerability reportedly affects AWStats. This issue is due to a failure of the application to properly validate access to sensitive data. An attacker may leverage this issue to gain access to potentially sensiti...

CVE-2005-0315

The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning...

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow / source: https://www.securityfocus.com/bid/12314/info Reportedly a local integer overflow vulnerability affects the Darwin Kernel. This issue is due to a failure of the affected to properly handle integer signedness. An attacker may...

Cisco Unity Integrated with Exchange Has Default Passwords

...

IWebNegar - Multiple SQL Injections

IWebNegar - Multiple SQL Injections source: https://www.securityfocus.com/bid/11946/info iWebNegar is reported prone to multiple SQL injection vulnerabilities, these issues exist due to a lack of sufficient boundary checks performed on user-supplied URI parameter data. These issues could...

phpMyAdmin < 2.5.2 Multiple Vulnerabilities

Binary data 2420.prm...

XSS in TheFaceBook round 2

Authors: Alex Lanstein, Ivo Parashkevov Date: November 15, 2004 Affected Software: TheFaceBook - All Versions Software URL: http://www.thefacebook.com TheFaceBook, a popular college networking social, not technological tool is vulnerable to many XSS holes in it's search and editing methods. In...

CGI bugs

No description provided...

cPanel 9.9.1 -R3 Front Page Extension - Installation Information Disclosure

cPanel 9.9.1 -R3 Front Page Extension - Installation Information Disclosure source: https://www.securityfocus.com/bid/11456/info It is reported that cPanel is susceptible to an information disclosure vulnerability in its function to enable Front Page extensions. This vulnerability reportedly allo...

phpPOC.txt

PHP File Upload Vulnerability POC Title: Overwrite $FILE array in rfc1867 - Mime multipart/form-data File Upload Author: Stefano Di Paola Affected: Php "; if isuploadedfile$FILES'userfile''tmpname' && moveuploadedfile$FILES'userfile''tmpname', $uploadfile print "File is valid, and was successfull...

Unmanarc Remote Control Server (URCS) Detection

This host appears to be running Unmanarc Remote Control Server URCS. While it does have some legitimate uses, URCS may also have been installed silently as a backdoor, which may allow an intruder to gain remote access to files on the remote system. If this program was not installed for remote...