dlink-overflow.txt

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

CVE-2007-5958: Exposure of Sensitive Information to an Unauthorized Actor

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

Xorg / XFree86 file existence disclosure vulnerability

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

Xorg / XFree86 file existence disclosure vulnerability

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

CVE-2007-5717

Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor SP via unspecified vectors, a different vulnerability than CVE-2007-5170...

Default configuration

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471: Undefined Security Weakness

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

PBEmail 7 ActiveX Edition Insecure Method Exploit

No description provided by source. pre bFound by/b: Katatafish karatatataathushdotcom bsoftware/b:PBEmail 7 ActiveX Edition bVendor:/b http://www.perfectionbytes.com bvulnerability/b: Insecure method SaveSenderToXmlXmlFilePath: BSTR; stdcall; in PBEmail7Ax.dll bTested on Internet explorer 7 with...

PBEmail 7 ActiveX Edition Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================= PBEmail 7 ActiveX Edition Insecure Method Exploit ================================================= Found by: Katatafish karatatataathushdotcom software:PBEmail 7 ActiveX Edition Vendor:...

PBEmail 7 - ActiveX Edition Insecure Method

PBEmail 7 - ActiveX Edition Insecure Method Found by: Katatafish karatatataathushdotcom software:PBEmail 7 ActiveX Edition Vendor: http://www.perfectionbytes.com vulnerability: Insecure method SaveSenderToXmlXmlFilePath: BSTR; stdcall; in PBEmail7Ax.dll Tested on Internet explorer 7 with Windows ...

PBEmail 7 - ActiveX Edition Insecure Method

Found by: Katatafish karatatataathushdotcom software:PBEmail 7 ActiveX Edition Vendor: http://www.perfectionbytes.com vulnerability: Insecure method SaveSenderToXmlXmlFilePath: BSTR; stdcall; in PBEmail7Ax.dll Tested on Internet explorer 7 with Windows XP SP 2. Thanks: str0ke kat.SaveSenderToXml...

Microsoft Windows RPC NTLMSSP Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to adequately handle specially crafted RPC packets. Attackers can exploit this issue to cause an affected computer to stop responding or to restart. Successful attacks will deny service to legitima...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests. NOTE: the...

Design/Logic Flaw

Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to bypass access restrictions and read or write unspecified data via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2007-5211

Multiple cross-site scripting XSS vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests. NOTE: the...

CVE-2007-5210

Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to bypass access restrictions and read or write unspecified data via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2007-5211

Multiple cross-site scripting XSS vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests. NOTE: the...

CVE-2007-5210

Arbor Networks Peakflow SP is affected. Infections concern remote authenticated users bypassing access restrictions to read or write unspecified data via unknown vectors, affecting releases earlier than 3.5.1 patch 14 and 3.6.x prior to 3.6.1 patch 5. Root cause details are not fully disclosed in...

CVE-2007-5211

CVE-2007-5211 involves multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled. The flaw allows remote attackers to inject arbitrary web script/HTML via unspecified GET/POST vectors. The und...