291 matches found
Gallery code execution
No description provided...
Выполнение JavaScript в контексте сервера
Можно вставить javascript в URL таким образом, что javascript будет выполнен в контексте сервера...
reading from execve()ed setuid memory
Posted to bugzilla.redhat.com: Tue, 15 May 2001 06:43:27 -0400 This was then made unaccessable, and I've seen nothing that looks like a fix yet. A month and a half seems like long enough to work it out. Contents of https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=40658 as posted before the pag...
SalesLogix Eviewer Web App Bug: URL request crashes eviewer web application
Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, I am not liable for any damages caused by direct or indirect use of the information or functionality provided by this advisory. I bear NO responsibility for...
sshd.install.risks.txt
Date: Mon, 10 May 1999 22:26:19 +0200 From: "GWDVMS::MOELLER" Subject: Risks of upgrading a UNIX system When was the last time you rebuilt all privileged suid root' applications when upgrading a unix system, just in case? I'm pretty sure one can find small print' that demands this, however I'm...
msie.5.typedURL.ftp.address.txt
Date: Thu, 6 May 1999 12:14:51 -0600 From: Mark To: [email protected] Subject: Odd Behavior in IE5 Has anyone noticed this? After you visit an FTP site, IE5 places that URL in the TypedURLs list just like it does with Web site addresses, as seen in the drop down "Address" list at t...
excite-web.txt
Date: Mon, 30 Nov 1998 17:20:04 -0600 From: Michael Gerdts Subject: Security bugs in Excite for Web Servers 1.1 On November 11 I reported the folloing problmes to [email protected]. I have only recieved an automated reply. I have found numerous security concerns with EWS 1.1 which can lead to an...
Anonymous FTP Enabled
Brute force setting must be enabled to use this plugin. Nessus has detected that the FTP server running on the remote host allows anonymous logins. Therefore, any remote user may connect and authenticate to the server without providing a password or unique credentials. This allows the user to...
PT-1999-1176 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An issue has been identified where an unrestricted remote trust relationship for Unix systems has been set up. This setup can be done, for example, by using a + sign in /etc/hosts.equiv...
CVE-2025-3494
...
Office 2010 1062
Office 2010 1062...