FreeBSD : mod_pubcookie -- XSS vulnerability (91afa94c-c452-11da-8bff-000ae42e9b93)

Nathan Dors of the Pubcookie Project reports : Non-persistent XSS vulnerabilities were found in the Pubcookie Apache module modpubcookie and ISAPI filter. These components mishandle untrusted data when printing responses to the browser. This makes them vulnerable to carefully crafted requests...

postgresql -- encoding based SQL injection

The PostgreSQL development team reports: An attacker able to submit crafted strings to an application that will embed those strings in SQL commands can use invalidly-encoded multibyte characters to bypass standard string-escaping methods, resulting in possible injection of hostile SQL commands in...

CVE-2006-0401

Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors...

Mac OS X 10.4.x < 10.4.6 Firmware Unspecified Password Bypass

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.6. Mac OS X 10.4.6 contains a security fix for a local authentication bypass vulnerability. A malicious local user may exploit this vulnerability to bypass the firmware password and gain access to Single User mode. This...

mod_pubcookie -- cross site scripting vulnerability

Nathan Dors of the Pubcookie Project reports: Non-persistent XSS vulnerabilities were found in the Pubcookie Apache module modpubcookie and ISAPI filter. These components mishandle untrusted data when printing responses to the browser. This makes them vulnerable to carefully crafted requests...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

CURL-CVE-2005-4077 URL Buffer Overflow

libcurl's URL parser function can overflow a heap based buffer in two ways, if given a too long URL. These overflows happen if you 1 - pass in a URL with no protocol like "http://" prefix, using no slash and the string is 256 bytes or longer. This leads to a single zero byte overflow of the heap...

security flaw

The parsestr function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the registerglobals directive via inputs that cause a request to be terminated due to the memorylimit setting, which causes PHP to set an internal flag that...

PT-2005-4309 · Vubb · Vubb

Name of the Vulnerable Software and Affected Versions: VUBB alpha rc1 Description: The issue allows remote attackers to obtain the installation path of the application. This can be achieved by using the viewforum action with the f parameter set to a single quote '. Recommendations: For VUBB alpha...

Immunity Canvas: STINKY

Name| stinky ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Notes| CVE Name: CVE-2005-3252 VENDOR: SourceFire Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date public...

Immunity Canvas: STINKY_DEBUG

Name| stinkydebug ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Debug Notes| CVE Name: CVE-2005-3252 VENDOR: Stinky Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date...

SUSE-SA:2005:046: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2005:046 apache,apache2. A security flaw was found in the Apache and Apache2 web servers which allows remote attacker to 'smuggle' requests past filters by providing handcrafted header entries. Fixed Apache 2 server packages were...

Opty2

Opty2 multi-byte NOP generator This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/nop/opty2' Opty2 ----- This class implements single-byte NOP generation for X86. It takes from ADMmutate and from spoonfu...

CVE-2004-1877

The CVE-2004-1877 issue is documented in connected sources as a phishing vulnerability in Oracle 9iAS Single Sign-On. Specifically, the p_submit_url value in the sample login form for Oracle SSO (9iAS, Release 2/9.0.2) can be exploited by remote attackers to spoof the login page, potentially caus...

CVE-2005-1108

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

CVE-2005-1108

The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...

IBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities

Binary data 5077.prm...

TCP RST packets spoofing

By sending spoofed RST it's possible to terminate established TCP connection. unlike TPC hijacking attacks there is no need for exact TCP sequence number, and number can be any number from handshaked TCP window. It significantly increases attack efficiency. In NetBSD sequence number for RST is no...