CVE-2005-2344: Improper Restriction of Operations within the Bounds of a Memory Buffer

The BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server BES 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics PNG file that triggers a heap-based buffer overflow...

CVE-2005-2341: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Research in Motion RIM BlackBerry Attachment Service allows remote attackers to cause a denial of service hang via an e-mail attachment with a crafted TIFF file...

CVE-2005-2343

Research in Motion RIM BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service hang via a Java Application Description JAD file with a long application name and vendor string, which prevents a browser dialog from being properly...

CVE-2005-2342

Research in Motion RIM BlackBerry Router allows remote attackers to cause a denial of service communication disruption via crafted Server Routing Protocol SRP packets...

win32 Download & Exec Shellcode 226 bytes+

Exploit for win32 platform in category shellcode ========================================== win32 Download & Exec Shellcode 226 bytes+ ========================================== / \ WINSHELLCODE / :: win32 download & exec shellcode :: \ :: by Darkeagle of Unl0ck Research Team http://exploiterz.or...

CVE-2005-2342

Research in Motion RIM BlackBerry Router allows remote attackers to cause a denial of service communication disruption via crafted Server Routing Protocol SRP packets...

CVE-2005-2343

Research in Motion RIM BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service hang via a Java Application Description JAD file with a long application name and vendor string, which prevents a browser dialog from being properly...

Research in Motion (RIM) BlackBerry Handheld web browser does not properly handle Java Application Description (JAD) files

Overview The Research in Motion RIM BlackBerry Handheld web browser is vulnerable to a denial of service via a specially crafted Java Application Description JAD file. Description The BlackBerry Handheld web browser does not properly handle malformed JAD files. JAD files in J2ME are used to...

Secunia Research: TUGZip ARJ Archive Handling Buffer Overflow Vulnerability

====================================================================== Secunia Research 30/12/2005 - TUGZip ARJ Archive Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA17865] VisNetic Mail Server Multiple Webmail Vulnerabilities

TITLE: VisNetic Mail Server Multiple Webmail Vulnerabilities SECUNIA ADVISORY ID: SA17865 VERIFY ADVISORY: http://secunia.com/advisories/17865/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: VisNetic Mail Server 8.x...

Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities

====================================================================== Secunia Research 27/12/2005 - IceWarp Web Mail Multiple File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

VisNetic / Merak Mail Server Multiple Remote Vulnerabilities

The remote host is running VisNetic / Merak Mail Server, a multi- featured mail server for Windows. The webmail and webadmin services included in the remote version of this software are prone to multiple flaws. An attacker could send specially crafted URLs to execute arbitrary scripts, perhaps...

win32 Download & Exec Shellcode 226 bytes+

win32 Download & Exec Shellcode 226 bytes+. Shellcode exploit for win32 platform / \ WINSHELLCODE / :: win32 download & exec shellcode :: \ :: by Darkeagle of Unl0ck Research Team http://exploiterz.org :: / :: to avoid 0x00 use ^^xor^^ : :: \ :: greets goes to: Sowhat, 0x557 guys, 55k7 guys,...

CVE-2005-4434

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4434

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4434

CVE-2005-4434 affects AbleDesign ReSearch 2.x with a Cross-site scripting (XSS) vulnerability. The vectors are unknown, allowing remote injection of arbitrary script/HTML. Impact: partial integrity, no confidentiality or availability impact stated. The provided data does not specify exploitable c...

IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation

---------------------------------------------------------------------- IRM Security Advisory No. 013 Ultraapps Issue Manager is vulnerable to Privilege Escalation Vulnerablity Type / Importance: Privilege Escalation / High Problem discovered: November 25th 2005 Vendor contacted: November 25th 200...

CVE-2005-4434: Undefined Security Weakness

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

[SA18122] AbleDesign ReSearch Cross-Site Scripting Vulnerability

TITLE: AbleDesign ReSearch Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18122 VERIFY ADVISORY: http://secunia.com/advisories/18122/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: AbleDesign ReSearch 2.x http://secunia.com/product/6576/ DESCRIPTION:...

[Full-disclosure] Secunia Research: Pegasus Mail Buffer Overflow and Off-by-One Vulnerabilities

====================================================================== Secunia Research 20/12/2005 - Pegasus Mail Buffer Overflow and Off-by-One Vulnerabilities - ====================================================================== Table of Contents Affected...