6617 matches found
[Full-disclosure] asterisk remote pre-auth denial of service
A very serious remote denial of service was recently patched in asterisk some limited information on the problem can be found here http://asterisk.org/taxonomy/term/32 the bug exists in the asterisk SIP channel driver, anyone using asterisk running SIP is advised to patch their systems as soon as...
Samba < 3.0.24 Multiple Flaws
According to its version number, the remote Samba server is affected by several flaws : - A denial of service issue occuring if an authenticated attacker sends a large number of CIFS session requests which will cause an infinite loop to occur in the smbd daemon, thus utilizing CPU resources and...
Snitz Forums 2000 v3.1 SR4 (pop_profile.asp) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Snitz Forums 2000 v3.1 SR4 popprofile.asp SQL Injection Vulnerability ========================================================================...
nabopoll 1.2 Remote Unprotected Admin Section Vulnerability
Exploit for unknown platform in category web applications =========================================================== nabopoll 1.2 Remote Unprotected Admin Section Vulnerability =========================================================== nabopoll 1.1.2 sensitive file admin without password By :...
Remotesoft .NET Explorer远程堆栈缓冲区溢出漏洞
Remotesoft .NET Explorer是一款反汇编工具。 Remotesoft .NET Explorer处理cpp文件存在一个缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意cpp文件，诱使用户打开可触发。 Remotesoft .NET Explorer 2.0.1 目前没有详细解决方案提供： http://www.remotesoft.com/linker/ /usr/bin/ python print "--------------------------------------------------------------" print...
Michelles L2J Dropcalc <= v4 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== Michelles L2J Dropcalc = v4 Remote SQL Injection Vulnerability ===============================================================...
Sun Solaris 10 - ICMP Remote Denial of Service
Sun Solaris 10 - ICMP Remote Denial of Service // source: https://www.securityfocus.com/bid/22323/info Sun Solaris is prone to a remote denial-of-service vulnerability. A successful attack can trigger a crash in the operating system, leading to a denial-of-service condition for legitimate users...
Apple Mac OSX 10.4.x - iMovie HD .imovieproj Filename Format String
Apple Mac OSX 10.4.x - iMovie HD .imovieproj Filename Format String source: https://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting...
phpMyReports <= 3.0.11 (lib_head.php) Remote File Include Vulnerability
No description provided by source. ================================================================= URL.S = http://www.phpmytools.org/pmr3.0.1120050105.tar.gz ! ================================================================= Finded by GolDM = Mahmoodali && Google.Com !...
makit Newsposter Script v3 Remote SQL Injection Vulnerability
No description provided by source. Title : makit news/blog poster =v3newspage.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.makit.net $$ : Free SQL--------------------------------------------------------- http://target/path//newspage.asp?uid=SQL Example:...
[Full-disclosure] [SECURITY] [DSA 1251-1] New netrik packages fix arbitary shell command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1251-1 [email protected] http://www.debian.org/security/ Steve Kemp January 21, 2007 -...
[SA23733] Fastilo "p" Cross-Site Scripting Vulnerability
TITLE: Fastilo "p" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA23733 VERIFY ADVISORY: http://secunia.com/advisories/23733/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Fastilo 2.x http://secunia.com/product/13222/ DESCRIPTION: David Sopas has...
Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow
source: https://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to execute arbitrary code with...
Uguestbook Remote Password Disclosure Vulnerability
Uguestbook Remote Password Disclosure Vulnerability Software: Uguestbook Version: 1.0 Download: http://www.uapplication.com/download/Uguestbook20-201.0.zip Found by: beks Risk: Medium http://target/UguestbookPath/mdb-database/guestbook.mdb...
[SECURITY] [DSA 1247-1] New libapache-mod-auth-kerb packages fix remote denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1247-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 08, 2007 - ------------------------------------------------------------------------ Package :...
AutoDealer 2.0 - 'detail.asp?iPro' SQL Injection
Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...
Enthrallweb ePhotos 1.0 (subLevel2.asp) SQL Injection Vulnerability
No description provided by source. Title : Enthrallweb ePhotos 1.0 subLevel2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...
Ananda Real Estate 3.4 - 'agent' SQL Injection
Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
Calendar MX BASIC <= 1.0.2 (ID) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== Calendar MX BASIC = 1.0.2 ID Remote SQL Injection Vulnerability ================================================================== Title : Calendar MX BASIC = 1.0.2 ID Remo...
Mandrake Linux Security Advisory : heartbeat (MDKSA-2006:142)
Two vulnerabilities in heartbeat prior to 2.0.6 was discovered by Yan Rong Ge. The first is that heartbeat would set insecure permissions in an shmget call for shared memory, allowing a local attacker to cause an unspecified denial of service via unknown vectors CVE-2006-3815. The second is a...