[SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 709-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

RSA Security RSA Authentication Agent For Web 5.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/13168/info A remote cross-site scripting vulnerability affects the RSA Security RSA Authentication Agent for Web. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web...

CVE-2004-1092

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory...

IBM Websphere 5.05.16.0 - Application Server Web Server Root JSP Source Code Disclosure

IBM Websphere 5.05.16.0 - Application Server Web Server Root JSP Source Code Disclosure source: https://www.securityfocus.com/bid/13160/info A remote JSP source disclosure vulnerability reportedly affects the IBM WebSphere Application Server. This issue is due to a failure of the application to...

Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow (MS05-020)

Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow MS05-020 source: https://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit thi...

Microsoft Windows Message Queuing Remote Buffer Overflow Vulnerability

Description A remote buffer overflow vulnerability affects Microsoft Windows. This issue is due to a failure of the affected functionality to properly validate the length of user-supplied strings prior to copying them into static process buffers. This vulnerability may be exploited over RPC. An...

PostNuke Phoenix 0.760 RC3 - Module Cross-Site Scripting

PostNuke Phoenix 0.760 RC3 - Module Cross-Site Scripting source: https://www.securityfocus.com/bid/13076/info A remote cross-site scripting vulnerability affects PostNuke. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamical...

PostNuke Phoenix 0.760 RC3 - 'OP' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13075/info A remote cross-site scripting vulnerability affects PostNuke. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content. An attacker may leverage this...

PHP-Nuke 6.x 7.6 Top module - SQL Injection

PHP-Nuke 6.x 7.6 Top module - SQL Injection /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work wit...

[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

YepYep MTFTPD 0.2/0.3 - Remote CWD Argument Format String

// source: https://www.securityfocus.com/bid/12947/info mtftpd is reported prone to a remote format string vulnerability. Reports indicate that this issue may be exploited by a remote authenticated attacker to execute arbitrary code in the context of the vulnerable service. This vulnerability is...

PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities

PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12841/info PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input befo...

PHPAdsNew 2.0.4 - 'AdFrame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12803/info phpAdsNew is reportedly affected by a remote cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Techland XPand Rally 1.01.1 - Remote Format String

Techland XPand Rally 1.01.1 - Remote Format String source: https://www.securityfocus.com/bid/12772/info A remote format string vulnerability affects XPand Rally. This issue is due to a failure of the application to securely call a formatted printing function. An attacker may leverage this issue t...

ArGoSoft FTP Server DELE Command Remote Buffer Overrun

According to its banner, the version of ArGoSoft FTP Server installed on the remote host is affected by a heap-based buffer overflow that can be triggered by a malicious user with delete rights who issues a DELE command with an argument exceeding 2000 characters. C Tenable Network Security, Inc...

Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow

Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow source: https://www.securityfocus.com/bid/12750/info It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied inp...

Ethereal 0.10.9 - Denial of Service

/ Ethereal 3G-A11 remote buffer overflow PoC exploit -------------------------------------------------- Coded by Leon Juranic LSS Security / include include include include include include include main int argc, char argv int sock; struct sockaddrin sin; unsigned char buf1024; char bla200;...

Computalynx CProxy 3.33.4.x - Directory Traversal

Computalynx CProxy 3.33.4.x - Directory Traversal source: https://www.securityfocus.com/bid/12722/info CProxy is reported prone to a remote directory traversal vulnerability. This issue arises due to insufficient sanitization of user-supplied data. A remote user may exploit this issue to disclose...

Cerulean Studios Trillian 3.0 - Remote .png Image File Parsing Buffer Overflow

Cerulean Studios Trillian 3.0 - Remote .png Image File Parsing Buffer Overflow source: https://www.securityfocus.com/bid/12703/info A remote buffer overflow vulnerability affects Cerulean Studios Trillian. This issue is due to a failure of the application to securely copy image data into finite...

NNTP Server Password Handling Remote Overflow

Nessus was able to crash the remote NNTP server by sending a too long password. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. C Tenable Network Security, Inc. Overflow on the user name is tested by cassandranntpdos.nasl NNTP protocol is...