CVE-2009-1902

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service crash via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference...

CVE-2009-1902

CVE-2009-1902 affects ModSecurity prior to 2.5.9. The vulnerability arises in the multipart processor when a datapost request has a missing part header name, causing a NULL pointer dereference and potential denial of service (remote crash). Evidence from SUSE confirms the same description and imp...

CVE-2009-1902: NULL Pointer Dereference

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service crash via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference...

CVE-2004-2764

CVE-2004-2764 affects Sun JRE/JSDK 1.4.x (1.4.0 to 1.4.2_04, and 1.4.1, 1.4.2) where untrusted applets and unprivileged servlets could gain privileges and read data from other applets due to issues in the XSLT processor (XML sniffing). The vulnerability description states privilege escalation via...

CVE-2004-2764: Undefined Security Weakness

Sun SDK and Java Runtime Environment JRE 1.4.2 through 1.4.204, 1.4.1 through 1.4.107, and 1.4.0 through 1.4.004 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML...

Debian Security Advisory DSA 1799-1 (qemu)

The remote host is missing an update to qemu announced via advisory DSA 1799-1. OpenVAS Vulnerability Test $Id: deb17991.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1799-1 qemu Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Ascad Networks 5 Insecure Cookie

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

Ascad Networks 5 - Products Insecure Cookie Handling

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

Ascad Networks 5 - Products Insecure Cookie Handling

Ascad Networks 5 - Products Insecure Cookie Handling ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Ascad Networks 5 Products Insecure Cookie Handling Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Ascad Networks 5 Products Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ Ascad Networks 5 Products Insecure Cookie Handling Vulnerability ================================================================...

[SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1799-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 11, 2009 http://www.debian.org/security/faq -...

Authentication flaw

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."...

CVE-2009-1504

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."...

CVE-2009-1504

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."...

CVE-2009-1504

CVE-2009-1504 affects Absolute Form Processor XE 1.5. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to “lvl=1&userid=1.” This is supported by NVD/NVD-derived details; CVSS metrics indicate network attack, low co...

CVE-2009-1504: Improper Authentication

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."...

Absolute Form Processor XE-V 1.5 Remote Change Pasword Exploit

No description provided by source. title Absolute Form Processor XE-V 1.5 Remote Change Pasword /title body bgcolor="FFFFFF" text="000000" form name="form1" method="post" action="http://www.xigla.com/absolutefp/demo/edituser.asp" table width="96%" border="0" cellspacing="2" cellpadding="2"...

Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln

No description provided by source. Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln ---------------------------------------------------------- Discovered By: ZoRLu Date: 11.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes...

Absolute Form Processor XE-V 1.5 - Remote Change Password

Absolute Form Processor XE-V 1.5 - Remote Change Password Absolute Form Processor XE-V 1.5 Remote Change Pasword Home:http://www.xigla.com E-mail : Username : Password :/b...