D-Link DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability

No description provided by source. D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer 7/8 Live demo: http://203.125.227.70/eng/index.cgi username: dlink...

PHP-Proxima autohtml.PHP Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7598/info A vulnerability has been reported for PHP-Proxima. The problem occurs in the autohtml.php script. Specifically, the script fails to verify the contents of a user-supplied variable before including a specified fi...

tinyserver 1.1 - Directory Traversal

No description provided by source. source: http://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of servi...

Cisco IOS 11.x/12.0 ILMI SNMP Community String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2427/info IOS is the operating system designed for various Cisco devices. It is maintained and distributed by Cisco systems. A problem in the versions of IOS 11.x and 12.0 could allow unauthorized access to certain...

DC Scripts DCShop Beta 1.0 02 File Disclosure Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2889/exploit DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data,...

WhitSoft SlimServe HTTPD 1.1 Get Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2451/info SlimServe HTTPd is a free HTTP Daemon maintained by WhitSoft Development. SlimServe is designed to provide basic HTTP services on the Microsoft Windows platform. A problem in the handling of HTTP GET requests...

E-Guest 1.1 Server Side Include Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5129/info E-Guest guest book is a freely available, open source guest book. It is designed for Unix and Linux operating systems. E-Guest does not adequately sanitize user-supplied input in guest book entries. Because of...

Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (4)

No description provided by source. source: http://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices usi...

Internet Explorer (6/7) Remote Code Execution -Remote User Add Exploit

No description provided by source. Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print \n; print...

Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3445/info Due to a flaw in the implementation of RDP in Windows 2000/NT Terminal Server, it is possible for a remote user to cause a host to stop responding. Sending malformed RDP packets to a host could cause a denial of...

Inktomi Search Software 3.0 Source Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2061/info A vulnerability exists in version 3.0 of Ultrseek server aka Inktomi Search. Due to a failure to properly validate user-supplied input, URLs submitted by a remote user of the form:...

jarle aase war ftpd 1.67 b04 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclose an arbitrary...

EType EServ 2.9x POP3 Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6520/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When a remote user...

hammer software metagauge 1.0.0.17 - Directory Traversal vulnerability

No description provided by source. Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest...

AldWeb MiniPortail 1.9/2.x LNG Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8504/info cross-site scripting vulnerability has been reported for miniPortail. The vulnerability exists due to insufficient sanitization of some user-supplied values. Specifically, malicious HTML code is not sanitized fr...

Citrix Metaframe for Windows NT 4.0 TSE 1.8 Java ICA Environment DoS

No description provided by source. source: http://www.securityfocus.com/bid/5439/info Citrix Metaframe is a commercial available remote desktop application. This issue affects Metaframe on the Microsoft Windows platform. It has been discovered that Metaframe can be made to become unstable. By...

AV Tutorial Script 1.0 - Remote User Pass Change Exploit

No description provided by source. ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

PostNuke Phoenix 0.72x Rating System Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users...

Microsoft Windows NT 4.0 SNMP-WINS DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2244/info The Simple Network Management Protocol SNMP provides remote network administration functions. Windows NT provides an optional SNMP implementation. Windows NT networks can use Windows Internet Name Service WINS, ...

XFree86 X11R6 3.3.5/3.3.6/4.0 Xserver Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1235/info A denial of service exists in XFree86 3.3.5, 3.3.6 and 4.0. A remote user can send a malformed packet to the TCP listening port, 6000, which will cause the X server to be unresponsive for some period of time...