2252 matches found
Design/Logic Flaw
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service application crash via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."...
CVE-2007-5691
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service application crash via a crafted reply to an unspecified listing command, related to "reading from invalid pointer."...
CVE-2002-2287
PHP remote file inclusion vulnerability in quickreply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter...
CVE-2002-2287: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in quickreply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter...
Microsoft Outlook Express / Windows Mail NNTP buffer overflow
Heap memory overflow on NNTP server reply parsing...
Apache mod_mem_cache information leak
Under some conditions data from previsously sent server reply headers may be leaked...
NavBoard 2.6.0 - Remote Code Execution
"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...
Squid < 2.6.STABLE18 Update Reply Processing DoS
Binary data 4305.prm...
Conquest game buffer overflow
Buffer overflow on parsing metaserver reply...
FTP Voyager buffer overflow
Stack buffer overflow stack overrun on server reply parsing...
PT-2007-1209 · Rapid · Rapid Classified
Name of the Vulnerable Software and Affected Versions: Rapid Classified version 3.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters in different scripts,...
ksirc client DoS
NULL pointer dereference on malformed server reply...
blogsql.txt
Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid, b.categoryid, b.entryauthorid, b.entryauthorname,...
Invision Community Blog Mod 1.2.4 - SQL Injection
Invision Community Blog Mod 1.2.4 - SQL Injection 1. Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid...
BulletProof FTP client buffer overflow
Buffer overflow on server reply parsing...
DEBIAN-CVE-2006-2017
Dnsmasq 2.29 allows remote attackers to cause a denial of service application crash via a DHCP client broadcast reply request...
CVE-2006-2017
CVE-2006-2017 affects dnsmasq 2.29 and describes a denial of service where a remote attacker can cause an application crash through a DHCP client broadcast reply request. The available sources consistently report the issue as a crash induced by a DHCP reply without detailing exploit specifics, af...
CVE-2006-2017: Undefined Security Weakness
Dnsmasq 2.29 allows remote attackers to cause a denial of service application crash via a DHCP client broadcast reply request...
FlexBB <= 0.5.7 BETA XSS
FlexBB = 0.5.7 BETA XSS Start a new thread and type this in the thread name field box :- scriptalertdocument.cookie/script Or post a reply to any topic and include this in your reply :- scriptalertdocument.cookie/script Found By: Qex...
Ultr@VNC 1.0.1 - 'client Log::ReallyPrint' Remote Buffer Overflow
!/usr/bin/python Ultr@VNC 1.0.1 Client Buffer Overflow - Luigi Auriemm POC by Paul Haas at Redspin.com Tested on WinXP SP 2: Launches Calc import socket, struct HOST = '' Localhost PORT = 5900 VNC Server BOFSZ = 1024 Buffer Size HEAD = "RFB 003.006\n" VNC Header MESSAGE = "Requires Ultr@VNC...