Buffer overflow

Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions SSC DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444...

CVE-2007-0641

Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions SSC DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444...

CVE-2007-0641

The CVE-2007-0641 entry describes a buffer overflow in EnumPrintersA within dapcnfsd.dll version 0.6.4.0 of Shaffer Solutions’ DiskAccess NFS Client. An attacker can trigger arbitrary code execution by sending a long argument to the RPC interface. This vulnerability is linked to similar issues CV...

CVE-2007-0641: Undefined Security Weakness

Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions SSC DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444...

CVE-2007-0116

Digger Solutions Intranet Open Source IOS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for data/intranet.mdb...

CVE-2007-0116

The CVE-2007-0116 issue affects Digger Solutions Intranet Open Source (IOS). The vulnerability arises from storing sensitive information under the web root with insufficient access control, enabling remote attackers to download a database containing passwords by directly requesting data/intranet....

CVE-2007-0116: Undefined Security Weakness

Digger Solutions Intranet Open Source IOS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for data/intranet.mdb...

CVE-2005-4822

Digger Solutions Intranet Open Source (IOS) 2.7.2 contains an SQL injection in projects/project-edit.asp via the project_id parameter. This allows remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the documents; no confirmed in-the-wild exploit data is l...

CVE-2005-4822

SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source IOS version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the projectid parameter...

CVE-2005-4822: Undefined Security Weakness

SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source IOS version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the projectid parameter...

CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal

The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteArbitraryFileRemoval.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Arbitrary File Removal ==================...

[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in "ViewImage.asp" by Daronet Internet Solutions

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in "ViewImage.asp" by Daronet Internet Solutions Discovered Date: 29/01/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.daronet.co.il Details: Daronet Internet Solutions website platfor...

[SA22048] Apple QuickTime Plug-In Local Resource Linking Weakness

TITLE: Apple QuickTime Plug-In Local Resource Linking Weakness SECUNIA ADVISORY ID: SA22048 VERIFY ADVISORY: http://secunia.com/advisories/22048/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Apple QuickTime 7.x http://secunia.com/product/5090/ DESCRIPTION: pdp has...

[Full-disclosure] [NETRAGARD-20060624 SECURITY ADVISORY] [ ROXIO TOAST 7 TITANIUM LOCAL ROOT COMPROMISE - DEJA VU RACE CONDITION]

Netragard, L.L.C Advisory 09/11/2006 Strategic Reconnaissance Team ------------------------------------------------ http://www.netragard.com -- "We make I.T. Safe." About Netragard ---------------------------------------------------------------------- Netragard is a unique I.T. Security company...

CVE-2006-4440

CVE-2006-4440 describes a PHP remote file inclusion vulnerability in Ay System Solutions CMS (main.php) versions 2.6 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the path[ShowProcessHandle] parameter. The evidence is drawn from the NVD/CVE reco...

CVE-2006-4441

The CVE-2006-4441 entry documents remote PHP code execution via PHP remote file inclusion in Ay System Solutions CMS

Ay System Solutions CMS <= v2.6 (main.php) Remote File Inclusion Exploit

============================================================================================== Ay System Solutions CMS = v2.6 main.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor...

CVE-2006-4441: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter to 1 home.php or 2 impressum.php. NOTE: the provenance of this information is unknown; the details ar...

CVE-2006-4440: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter...

Ay System CMS 2.6 - main.php Remote File Inclusion

Ay System CMS 2.6 - main.php Remote File Inclusion ============================================================================================== Ay System Solutions CMS ================================================================================================ Exploit :...