Bit 5 Blog 8.1 - 'addcomment.php' HTML Injection

source: https://www.securityfocus.com/bid/16246/info Bit 5 Blog is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

CVE-2004-2383

Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain...

CVE-2004-1763

HAHTsite Scenario Server 5.1 Patch 06 (build 91) is affected by a buffer overflow in hsrun.exe. The issue allows remote attackers to crash the service and potentially execute arbitrary code via a long project name, with a CVSS v2 base score of 10.0 (HIGH) and network attack vector. The connected ...

CVE-2004-1763

Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 build 91 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long project name...

CVE-2004-1763: Undefined Security Weakness

Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 build 91 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long project name...

CVE-2004-1763

Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 build 91 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long project name...

ChBg 1.5 - Scenario File Overflow

ChBg 1.5 - Scenario File Overflow source: https://www.securityfocus.com/bid/11957/info ChBg is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process...

ChBg 1.5 - Scenario File Overflow

source: https://www.securityfocus.com/bid/11957/info ChBg is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this...

[Full-Disclosure] sacred (pcgame) server flaw

Program: Sacred pc game http://sacred-game.com type: simple DoS, no client-auth affected version: 1.0.6.2 note: -fixed in later versions 1.0.7.0 dated:31.08.2004 -this security-lag exits for nearly half a year. although ascaron was informed at the date of release 02.03.2004, nothing happens long...

[NEWS] Buffer Overflow in HAHTsite Scenario Server

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

DEBIAN-CVE-2003-0068

The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker t...

Microsoft RASAPI32.DLL

NGSSoftware Insight Security Research Advisory Name: Buffer Overflow in Microsoft Rasapi32.dll Systems Affected: WinNT, Win2K, XP, Microsoft Routing And Remote Access Server "Steelhead" Severity: High Category: Buffer Overrun / Privilege Escalation Vendor URL: http://www.microsoft.com/ Author: Ma...

RedHat 6.16.2 - TTY Flood Users

RedHat 6.16.2 - TTY Flood Users !/bin/bash by teleh0r TTYDIR=/dev/pts NONSENSE=/bin/nice MYTTY=tty To prevent flooding of one's own TTY while /bin/true ; do for i in $TTYDIR/ ; do if -w $i -a -c $i -a $i != $MYTTY ; then cat $NONSENSE $i fi done done unset i milw0rm.com 2001-01-02...

microsoft.netmeeting.txt

Date: Tue, 4 May 1999 13:12:09 -0300 From: Wanderley J. Abreu Junior To: [email protected] Subject: Microsoft Netmeeting Hole Since I hadn't any response from Microsoft and a formal response from CERT i'm putting it here hopping for a helping hand on this problem. Version 1.0 October 1996 CERT...

CVE-2024-37364

Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information such as hotel invoice content with PII, and potentially create unauthorized room keys, by entering a guest-search quote character and then...