1400 matches found
Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit
--Security Report-- Advisory: MiniNuke CMS System = 1.8.2 membership.asp remote user password change exploit --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 12/01/06 08:49 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke...
cvstrac.txt
Hi, Im Richard Ngo, this is the first time i report an exploit and found a remote exploit that could allow arbitrary code execution in CVStrac. sample exploit filediff?f=CVSROOT/rcsinfo&v1=1.1&v2=1.2;w; All versions vulnerable. I have not contacted cvstrac.org since i cant find their email addres...
[openwebmail] Fw: Re: XSS bug.
Hello all, Its a forward message from openwebmail bugtraq system with the problem and the solution ;- ---------- Forwarded Message ----------- From: "openwebmail" [email protected] To: "aramosf" [email protected] Sent: Thu, 3 Jun 2004 20:30:07 +0800 Subject: Re: XSS bug. On Wed, 2...
paFileDB 3.1
============================ Security REPORT paFileDB 3.1 ============================ Product: paFileDB Version 3.1 and earlier Vulnerablities: arbitrary file-upload, path-traversal, arbitrary OS command-execution Vuln.-classes: http://www.owasp.org/asac/parametermanipulation/forms.shtml...
Inaccurate Reports Concerning PHP Vulnerabilities
There have been a number of reports circulating about possible vulnerabilities in PHP. I'm going to address them one-by-one: Integer Overflow in socketiovecalloc WRONG! This is a Null-pointer de-reference: EAX = 00000000 EDI = 41414141 0085353A 8B 38 mov edi,dword ptr eax The access violation...
typo3 issues
hola, ... [email protected]/Martin Eiszner ===================== Security REPORT TYPO3 ===================== this document: http://www.websec.org/adv/typo3.html Product: Typo3 Version 3.5b5 / Earlier versions are possibly vulnerable too Vendor: Typo3 http://www.typo3.com Vendor-Status:...
web-erp 0.1.4 database access vulnerability
================================== Security REPORT web-erp 0.1.4 and earlier ================================== Product: web-erp 0.1.4 and earlier Vulnerabilities: full database access Vendor: Phil Daintree http://web-erp.sourceforge.net/ Vendor-Status: E-Mail to "[email protected]" date:...
Northern Solutions Xeneo Web Server 2.12.2 - Denial of Service
Northern Solutions Xeneo Web Server 2.12.2 - Denial of Service source: https://www.securityfocus.com/bid/6098/info A denial of service vulnerability has been reported for Xeneo web server. When the web server processes a malformed HTTP request, it will crash and lead to the denial of service...
cfingerd local vulnerability (possibly root)
Hi, I sent this mail 2 weeks ago, but still didn't receive a reply. Neither did the cfingerd authors change anything on their site http://www.infodrom.ffis.de/projects/cfingerd/. So I will do my duty and report this on bugtraq. I didn't check versions prior to cfingerd 1.4.3, but I suppose they a...
All, After reading a report on security focus that deals with the sonicwall soho versions 4.0 and 5.0 being vulnerable to a buffer overflow by using a alot of characters in the username...I started testing againg our Sonicwall Pro and Pro VX in the lab. Entering this for the username -...
3com_hub_vuln.txt
Subject: Re: One more 3Com SNMP vulnerability To: [email protected] Hi all, Well spotted. To be more accurate, this bug can be found on 3Com SuperStack II Port Switch Hubs running software version 2.10. The bug disappeared from version 2.12. New software versions are available at...
[SECURITY] Current versions of seyon may contain malicious code
One year ago, we have received a report from SGI that a vulnerability has been discovered in the seyon program which can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. However, the license of Seyon doesnt permit us to provide a fix, now is th...
kki.inactive.connections.txt
Date: Wed, 28 Apr 1999 13:59:28 +0200 From: Lukasz Luzar To: [email protected] Subject: KKIS.28041999.002.b S E C U R I T Y Contacts KKI Security Team Cracow Commercial Internet http://www.security.kki.pl http://www.kki.pl mailto:[email protected] mailto:[email protected] Informations Raport...
MS:65568415-273E-426C-AA97-140218EB8C0C
...
MS:996A43BB-4FD3-4628-970E-8339045F138C
...
CVE-2024-21712
CVE-2024-21712 is rejected/not used per Initial Description; does not represent an active vulnerability entry.
Windows Malicious Software Removal Tool - v5.134 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...