2444 matches found
WarFTP Daemon < 1.82.00-RC13 Multiple Command Remote Format Strings
Binary data 3808.prm...
Sun Secure Global Desktop / Tarantella < 4.20.983 Multiple XSS
Sun Secure Global Desktop or Tarantella, a Java-based program for web-enabling applications running on a variety of platforms, is installed on the remote web server. According to the version reported in one of its scripts, the installation of the software on the remote host fails to sanitize...
Sun Secure Global Desktop / Tarantella < 4.20.983 Multiple XSS
Binary data 3760.prm...
OpenSSH 4.3 p1 - Duplicated Block Remote Denial of Service
OpenSSH 4.3 p1 - Duplicated Block Remote Denial of Service !/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy Yes, I really did implement crc-32 in bash. usage: script victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netcat...
[SECURITY] [DSA 1169-1] New MySQL 4.1 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1169-1 [email protected] http://www.debian.org/security/ Martin Schulze September 5th, 2006 http://www.debian.org/security/faq -...
gtetrinet -- remote code execution
The Debian Security Team reports: Michael Gehring discovered several potential out-of-bounds index accesses in gtetrinet, a multiplayer Tetris-like game, which may allow a remote server to execute arbitrary code...
DSA-1163 gtetrinet - programming error
Bulletin has no description...
Security Best Practice: POP3/IMAP Security
Post Office Protocol version 3 POP3 and Internet Messaging Access Protocol version 4 IMAP4 are electronic mail protocols used to retrieve messages stored in e-mail servers.There are several serious security limitations with these protocols that allow malicious attackers to compromise a remote...
SpamAssassin spamd Crafted Message Arbitrary Command Execution
The remote host is running spamd, a daemon belonging to SpamAssassin and used to determine whether messages represent spam. The installed version of spamd on the remote host appears to allow an unauthenticated user to execute arbitrary commands, subject to the privileges of the user under which i...
PunkBuster-1.229.txt
Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...
Different FTP servers multiple security vulnerabilities
Multiple vulnerabilities were uncovered with FTP Fuzzer stress test suite. - ArgoSoft FTP Server RNTO Unicode overflow - Golden FTP Server NLST overflow - FileZilla FTP Server MLSD - FileZilla remote server interface homemade protocol - WarFTPD various exceptions and WDM.exe overflow...
Mantis File Inclusion and SQL Injection Flaws
The remote web server contains a PHP application that is affected by multiple flaws. Description : The remote version of Mantis suffers from a remote file inclusion vulnerability. Provided PHP's 'registerglobals' setting is enabled, An attacker may be able to leverage this issue to read arbitrary...
security flaw
Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service crash via a long symlink, which is not properly handled in 1 nfs2xdr.c or 2 nfs3xdr.c and causes a crash in the NFS client...
LieroX <= 0.62b Remote Server/Client Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================== LieroX include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h ...
LieroX <= 0.62b Remote Server/Client Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdarg.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
Plogger exploit method! - Vulnerability warning-the black bar safety net
http://www.hackeroo.com/Plogger 是 一 款 基于 PHP 的 网络日记 程序 the. Plogger does not filter the user submits the URI of the data, exploit vulnerabilities in the WEB permissions to execute arbitrary commands. Vulnerability in'plog-admin-functions.php'script for user-submitted'configbasedir'parameter is no...
WebCalendar < 1.0.2 Multiple Vulnerabilities
The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...
WebCalendar < 1.0.2 Multiple Vulnerabilities
Binary data 3303.prm...
CVE-2002-2183: Undefined Security Weakness
phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers...
Moodle < 1.5.3 Multiple SQL Injection Vulnerabilities
The remote installation of Moodle fails to sanitize user-supplied input to the 'id' parameter of the 'course/category.php' and 'course/info.php' scripts as well as the 'user' parameter of the 'iplookup/ipatlas/plot.php' script before using it in database queries. An attacker can exploit these...