8550 matches found
Cisco Unified Communications Manager CTL Provider Heap Overflow
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Directory traversal
Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selectedprovider parameter...
Authenticating security providers fails due to ClassLoader bugs
If the Trusted Application feature is not working and the following is seen noformat WARN atlassian.seraph.filter.TrustedApplicationsFilter Failed to login trusted application: confluence1234567 due to: com.atlassian.security.auth.trustedapps.InvalidCertificateException:...
xcart-rfi.txt
xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...
Design/Logic Flaw
Entrust Entelligence Security Provider ESP 8 does not properly validate certificates in certain circumstances involving 1 a chain that omits the root Certification Authority CA certificate, or an application that specifies disregarding 2 unknown revocation statuses during path validation or 3...
CVE-2007-4594
Entrust Entelligence Security Provider ESP 8 does not properly validate certificates in certain circumstances involving 1 a chain that omits the root Certification Authority CA certificate, or an application that specifies disregarding 2 unknown revocation statuses during path validation or 3...
CVE-2007-4594
Entrust Entelligence Security Provider ESP 8 does not properly validate certificates in certain circumstances involving 1 a chain that omits the root Certification Authority CA certificate, or an application that specifies disregarding 2 unknown revocation statuses during path validation or 3...
CVE-2007-4594
Entrust Entelligence Security Provider (ESP) 8 is affected by improper certificate validation in certain path-validation scenarios: (1) a chain that omits the root CA, (2) applications ignoring unknown revocation statuses, and (3) certain certification path errors. This could allow context-depend...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IDE Group DVD Rental System DRS 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application servi...
CVE-2007-4192
Multiple cross-site scripting XSS vulnerabilities in IDE Group DVD Rental System DRS 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application servi...
CVE-2007-4193
Multiple cross-site request forgery CSRF vulnerabilities in index.php in IDE Group DVD Rental System DRS 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by 1 modifying data or 2 canceling a subscription. NOTE: it is not clear whether IDE...
CVE-2007-4193
Multiple cross-site request forgery CSRF vulnerabilities in index.php in IDE Group DVD Rental System DRS 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by 1 modifying data or 2 canceling a subscription. NOTE: it is not clear whether IDE...
CVE-2007-4192
CVE-2007-4192 describes multiple XSS vulnerabilities in the IDE Group DVD Rental System (DRS) 5.1 before 20070801, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The note questions deployment coverage by IDE Group as an MSP; if all installations are upda...
CVE-2006-5277
Off-by-one error in the Certificate Trust List CTL Provider service CTLProvider.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow...
Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities Document ID: 92015 Advisory ID: cisco-sa-20070711-cucm http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml Revision 1.0 For Public Release 2007 July 1...
Ingres Data Access Server Detection
The remote service is an Ingres Data Access Server, which translates requests from the JDBC driver and .NET Data Provider into an internal format and forwards them to the appropriate DBMS server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
newsreactor-2.txt
/ NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 2 Check the other advisory for technical details. This exploit connects to your newsgroups provider and posts a crafted article. Ask your victim to grab it to trigger the bug and execute calc.exe. Return address should work on...
NewsReactor 20070220 Article Grabbing Remote BoF Exploit (2)
Exploit for unknown platform in category remote exploits ============================================================ NewsReactor 20070220 Article Grabbing Remote BoF Exploit 2 ============================================================ / NewsReactor 20070220 Article Grabbing Remote Buffer...
NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (2)
NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow 2 / NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 2 Check the other advisory for technical details. This exploit connects to your newsgroups provider and posts a crafted article. Ask your victim to grab it to...
