476 matches found
[SecurityOffice] Enceladus Server Suite v3.9 Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Enceladus Server Suite v3.9 Buffer Overflow Vulnerability -- - -- Type Buffer Overflow - -- Release Date December 09, 2002 - -- Product / Vendor Enceladus Server Suite is an Internet/Intranet lightweight Web and FTP Server for Windows, provides...
SecuRemote usernames can be guessed or sniffed using IKE exchange
SecuRemote usernames can be guessed or sniffed using IKE exchange Introduction: ------------- While performing a VPN security analysis for one of our customers, I discovered a potential issue with Firewall-1 SecuRemote IKE which can allow usernames to be guessed. I also observed the related issue...
texis(CGI) Path Disclosure Vulnerability
Advisory: texisCGI Path Disclosure Vulnerability Application: Thunderstone's texisCGI Release Date: 02.05.02 Severity: Any user can send an invalid path to texisCGI causing it to reveal the full path to the webroot. In some cases texis will display system specific informationOS, processor type...
numerous holes
+-----------------------------------------------------------+ | Independent Security Analysis | | "Security Vulnerabilities That Matter" | | | ++ / wwwwais.c is a CGI-based application that provides a frontend to several WAIS query tools. I was unable to locate the main distribution site for it,...
Sendmail 8.11.x (Linuxi386) - Local Privilege Escalation
Sendmail 8.11.x Linuxi386 - Local Privilege Escalation / sendmail 8.11.x exploit i386-Linux by [email protected] sd@ircnet This code exploits well-known local-root bug in sendmail 8.11.x, 8.12.x may be vulnerable too, but I didn't test it. It gives instant root shell with +s sendmail 8.11.x, x 6 We're usi...
Microsoft Windows SMB Service Enumeration
This plugin implements the SvcOpenSCManager and SvcEnumServices calls to obtain, using the SMB protocol, the list of active and inactive services of the remote host. An attacker may use this feature to gain better knowledge of the remote host. C Tenable, Inc. include"compat.inc"; if description...
unsigned.cab.exploit.txt
Vulnerability details and example exploit for Microsoft Active Setup control's unsigned CAB file execution vulnerability. Introduction Microsoft's Active Setup Control asctrls.ocx shipped with Internet Explorer 4 and above has a vulnerability in it as discovered by Juan Carlos Garcia Cuartango ,...
rfp2k01.txt
-- Advisory RFP2K01 ------------------------------ rfp.labs ------------ "How I hacked PacketStorm" A look at hacking wwwthreads via SQL ------------------------------- rain forest puppy / [email protected] --- Table of contents: -1. Scope of problem -2. Long explaination of SQL hacking -3. Soluti...
Microsoft Internet Explorer 4.x/5 / Outlook 2000 0/98 0/Express 4.x - ActiveX '.CAB' File Execution
Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4,Internet Explorer 4.1 for Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Outlook 2000 0/98 0,Outlook Express...
CVE-2025-53160
This CVE entry is rejected/not used and does not represent an active vulnerability.
Detectoid for Lync Server 2013 Persistent Chat
Detectoid for Lync Server 2013 Persistent Chat...
Detectoid: Exchange Server 2016 CU1
Detectoid for Exchange Server 2016 CU1...