Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...

openSUSE 10 Security Update : mono-core (mono-core-2392)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2392...

eXtremail <= 2.1.1 memmove() Remote Denial of Service Exploit

Exploit for linux platform in category dos / poc ============================================================= eXtremail eXtremail 1,50 $maxlen = intrand50 + 1; 0, $maxlen 0.75 - 0, $maxlen 0x75 - 1 $pad1len = intrand$maxlen 0.75; 0, $maxlen - $pad1len/2 - 1, $maxlen - $pad1len/2 $pad2len =...

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow / extremail-v6.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 2048 define BBUFSIZE BUFSIZE/34+1 define NOP 0x41 define AUTHCMD "1 AUTHENTICATE PLAIN\n" define DEFPORT 143 define PORTIMAPD DEFPORT...

CVE-2007-5431

include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...

php524ioncube-bypass.txt

ionCube output:"; echo $MyBootioncube; ?...

PHP 5.2.4 ionCube extension safe_mode / disable_functions Bypass

Exploit for unknown platform in category local exploits ================================================================ PHP 5.2.4 ionCube extension safemode / disablefunctions Bypass ================================================================ ionCub...

PHP 5.2.4 ionCube - 'ioncube_read_file' Safe Mode / disable_functions Bypass

ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...

PHP 5.2.4 ionCube - ioncube_read_file Safe Mode Disable Functions Bypass

PHP 5.2.4 ionCube - ioncubereadfile Safe Mode Disable Functions Bypass ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...

Apple Safari / iPhone crossite access

Script can access source code of the page from different domain...

Directory Image Gallery XSS vuln.

Sunday, 7 October 2007 Directory Image Gallery XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://splitside.net/store/index.php?mainpage=productinfo&productsid=1 affected versions:Directory Image Gallery 1.1 other versions also can be affected. Directory Image Gallery contains...

Wikepage XSS vuln

Sunday, 7 October 2007 Wikepage XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.wikepage.org/ affected versions:Wikepage Opus 13 2007.2 other versions also can be affected. Wikepage contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the...

dbList XSS vuln.

dbList XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.livio.net/main/scripts.asp?fileid=24 affected versions:dbList v8.1 other versions also can be affected. dbList contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the...

SkaDate Online 5.06.0 - Remote File Disclosure

SkaDate Online 5.06.0 - Remote File Disclosure SkaDate Online Dating Software Remote File Disclosure Vulnerability Author : SnIpEr-SA.CoM tested verson : 5.0 & 6.0 Homepage : http://www.skadate.com Price: 795.00 Exp : http://www.site.com/member/featuredlist.php?viewmode=../../../../file%00...

SkaDate Online 5.0/6.0 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =========================================================== SkaDate Online 5.0/6.0 Remote File Disclosure Vulnerability =========================================================== SkaDate Online Dating Software Remote File Disclosure...

SkaDate Online 5.0/6.0 - Remote File Disclosure

SkaDate Online Dating Software Remote File Disclosure Vulnerability Author : SnIpEr-SA.CoM tested verson : 5.0 & 6.0 Homepage : http://www.skadate.com Price: 795.00 Exp : http://www.site.com/member/featuredlist.php?viewmode=../../../../file%00...

mxbb233-rfi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...

waraxe-2007-SA054.txt

waraxe-2007-SA054 - Local File Inclusion in Dance Music module for phpNuke ============================================================================ Author: Janek Vind "waraxe" Date: 25. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-54.html Target software...

JVN#75899905 Fuktommy.com httpd.pl included in its HTML preprocessor vulnerable in allowing an attacker to view arbitrary CGI source code

Fuktommy.com httpd.pl included in its HTML preprocessor is an open source web server. It contains a vulnerability which may allow an attacker to view CGI source code in the server as it does not properly handle a specially crafted HTTP request. Impact An attacker may be able to view CGI source co...

ragnarok-bypass.txt

VaLiuS has reported a vulnerability in Ragnarok Online Control Panel, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an error in the authentication process when checking page access. This can be exploited to bypass the...