BL4's SMTP server BufferOverflow Vulnerable

--------------------------------------------------------------------------- ECHOADV30$2006 BL4's SMTP server BufferOverflow Vulnerable --------------------------------------------------------------------------- Author : Dedi Dwianto Date : April, 27th 2006 Location : Indonesia, Jakarta Web :...

CVE-2006-1776: Undefined Security Weakness

PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the s parameter...

CVE-2006-1777: Undefined Security Weakness

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the s parameter, as demonstrated by injecting PHP sequences into an Apache errorlog file, which...

Code injection

Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service server process and transfer control process stop when the products "receive data unexpectedly"...

CVE-2006-1609

Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service server process and transfer control process stop when the products "receive data unexpectedly"...

CVE-2006-1609

Technical details for CVE-2006-1609 are not publicly available in the provided documents; monitor for updates.

CVE-2006-1609

Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service server process and transfer control process stop when the products "receive data unexpectedly"...

CVE-2006-1609: Undefined Security Weakness

Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service server process and transfer control process stop when the products "receive data unexpectedly"...

[ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200603-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[Full-disclosure] [SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1013-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2006 http://www.debian.org/security/faq -...

CVE-2006-1357: Undefined Security Weakness

Cross-site scripting XSS vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-1267: Undefined Security Weakness

Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request...

[SECURITY] [DSA 978-1] New GnuPG packages fix invalid success return

-------------------------------------------------------------------------- Debian Security Advisory DSA 978-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2006 http://www.debian.org/security/faq -...

Arescom NetDSL-1000 - 'TelnetD' Remote Denial of Service

/ Do you want to hack? lest go .. free your mind Tu veux etre un hacker? allez .. if faut libere ta tete! Quieres hackear? dale .. libera tu mente Vulnerabilidad en modem Arescom NetDSL-1000 por un buffer overflow debido www.framirez.com If you flood the telnet configuration a couple dozen times...

CVE-2006-0482: Undefined Security Weakness

Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service hang via a "date -s" command, which causes invalid sign extended arguments to be provided to the getcompattimespec function call...

vis.pl.txt

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

CVE-2005-4674: Undefined Security Weakness

Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the 1 c or 2 s parameter...

CVE-2005-4642: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

Cross site scripting

Cross-site scripting XSS vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0142: Undefined Security Weakness

Cross-site scripting XSS vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...