1277 matches found
Bandmin 1.4 XSS Exploit
Bandmin 1.4 XSS Exploit by Silent Needle A:BACKGROUND Bandmin is a cgi script show you the bandwidth for the sites in the server. B:DESCRIPTION The cross site scripting allow you to print a html or javascript or others in the webpage when it just open not write in the page. C:EXPLOIT These are th...
Terrible: Windows Media Player
Wednesday, August 21, 2002 Dear Mister, 'silent delivery and installation of an executable on the target computer, no client input other than viewing a web page' default installation of Internet Explorer and Windows Media Player. This is truly terrible. In addition to server side '404 errors',...
XSS in Slashcode
There is a nasty Cross Site ScriptingXSS vuln in Slashcode. This was used a day or so go on slashdot.org and resulted in most of the site being taken down for an hour or so. The maintainers of slashcode have patched the problem in CVS but have not even mentioned it anywhere that I can find. This...
Multiple bugs in bzip2
Silent file overwritting, invalid symbolic link permissions inside archieves, etc...
CVE-2001-0397
Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...
CVE-2001-0397
CVE-2001-0397 describes a buffer overflow in Silent Runner Collector (SRC) 1.6.1 that can be triggered by a long SMTP HELO command. The vulnerability allows remote attackers to cause a denial of service and, potentially, execute arbitrary commands. CVSS v2 base metrics are provided: AV:N/AC:L/Au:...
CVE-2001-0397
Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...
Silent Runner Collector - HELO buffer overflow vulnerability
Hello, Silent Runner Collector SRC has a buffer overflow condition in the routines that parse SMTP traffic. SRC is the "sniffer" conponent of the Silent Runner network traffic analysis suite. The overflow was noticed in SRC v1.6.1 but is likely present in other versions as well. The actual buffer...
Дырка в Silent Runner Collector (buffer overflow)
Переполнение буфера при анализе SMTP-трафика...
feeble.you!dora.exploit
Sunday, March 18, 2001 Silent delivery and installation of an executable on a target computer. No client input other than opening an email using Eudora 5.02 - Sponsored Mode provided 'use Microsoft viewer' and 'allow executables in HTML content' are enabled. One wonders why they are there in the...
[SECURITY] [DSA-010-1] two gpg problems
Package : gnupg Problem type : cheating with detached signatures, circumvention of web of trust Debian-specific: no Two bugs in GnuPG have recently been found: 1. false positives when verifying detached signatures - ----------------------------------------------------- There is a problem in the w...
silent.delivery.txt
Saturday, May 13, 2000 MICROSOFT SECURITY FLAW? Silent delivery and installation of an executable on a target computer. No client input other than opening an email or newsgroup post. 1. Using the following this can be accomplished with the default installation of Windows 95 and 98 and Internet...
Azure File Sync Agent v14.1 Release - December 2021
None None...
Update Rollup for Azure File Sync Agent – June 2019 (KB4489738)
None None...
Update Rollup for Azure File Sync Agent – July 2019 (KB4490496)
None None...