[VulnWatch] File Selection May Lead to Command Execution (GM#015-IE)

GreyMagic Security Advisory GM015-IE ===================================== By GreyMagic Software. 19 Apr 2005. Available in HTML format at http://www.greymagic.com/security/advisories/gm015-ie/. Topic: File Selection May Lead to Command Execution. Discovery date: 18 Jan 2005. Affected application...

pabox20.txt

pabox 2.0 no longer includes the Date and Time parameters in the POST data sent with your shout. The date and time parameters in previous versions were vulnerable to a cross site scripting attack. Now however in version 2.0 if you setup paBox to include an icon with your topic... eg: :winkface:...

[XSS] paBox 2.0

pabox 2.0 no longer includes the Date and Time parameters in the POST data sent with your shout. The date and time parameters in previous versions were vulnerable to a cross site scripting attack. Now however in version 2.0 if you setup paBox to include an icon with your topic... eg: :winkface:...

CVE-2004-0355

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...

RPC selection_svc Service In Use

Binary data 1032.prm...

phpBB profile.php Cross Site Scripting Vulnerability

Advisory Name : phpBB profile.php Cross Site Scripting Vulnerability Release Date : Mar 21,2004 Application : phpBB Version : phpBB 2.0.6d or others? Platform : PHP Vendor URL : http://www.phpbb.com/ Author : Cheng Peng Suapplesoupatmsn.com Proof of Conecpt: This vuln is in profile.php,when you...

MS Windows (RPC DCOM) Remote Exploit (Universal Targets)

No description provided by source. / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other options...

MS Windows (RPC DCOM) Remote Exploit (Universal Targets)

Exploit for unknown platform in category remote exploits ======================================================== MS Windows RPC DCOM Remote Exploit Universal Targets ======================================================== / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal...

Подмена подписанного документа в ECDSA

Серьёзная ошибка в ECDSA. В матаппарате новейшего американского стандарта ЭЦП известного как ECDSA DSA для эллиптических кривых 1 cтр. 25-30 существует серьёзная ошибка позволяющая выбрать такое значение секретного ключа, чтобы получить одинаковые подписи для разных документов. Это позволяет...

UDP Stress Tester Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================== UDP Stress Tester Denial of Service Exploit =========================================== include include include include include include include include include define shit "BLEAHD" timet elapsed; long...

Password protection bypass in Intel D845 motherboards

Password is not required to select boot device...

PT-2001-2561 · Phpbb · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB versions 1.4.0 and earlier Description: The issue allows remote authenticated users to execute arbitrary PHP code via an invalid language value. This prevents the variables $l statsblock in prefs.php or $l privnotify in auth.php from...

CVE-1999-0209

The SunView SunTools selectionsvc facility allows remote users to read files...

PT-1990-1001 · Sun · Sunview

Name of the Vulnerable Software and Affected Versions: SunView SunTools affected versions not specified Description: The issue allows remote users to read files due to a problem in the selection svc facility. Recommendations: At the moment, there is no information about a newer version that...

SunView (SunOS 4.1.1) - selection_svc Remote File Read

SunView SunOS 4.1.1 - selectionsvc Remote File Read Source: https://www.securityfocus.com/bid/8/info On Sun3 and Sun4 systems, a remote system can read any file that is readable to the user running SunView. On the 386i, a remote system can read any file on the workstation running SunView regardle...

Check if client has selected the SurfDev_AB8 branch

Evaluates to true if the RegKey value for BranchName is SurfDevAB8...

Check if client has selected the SurfDev_AB6 branch

Evaluates to true if the RegKey value for BranchName is SurfDevAB6...

Check if client has selected the SurfDev_AB7 branch

Evaluates to true if the RegKey value for BranchName is SurfDevAB7...

Check if client has selected the SurfDev_AB9 branch

Evaluates to true if the RegKey value for BranchName is SurfDevAB9...

Check if client has selected the SurfDev_PLE_CB-2 branch

Evaluates to true if the RegKey value for BranchName is SurfDevPLECB-2...