395 matches found
CVE-2007-3873
Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap VST feature is enabled, allows local users to cause a denial of service service...
Cross site scripting
Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...
Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy
Hi, Access to http://somesite/servlet/Spy should be restricted. But generally database or system administrators ignore the hardening of Oracle apllications or database. I have noticed XSS bug in Dynamic Monitoring services on Oracle-Application-Server-10g/10.1.2.0.0...
Oracle Dynamic Monitoring Services crossite scripting
Crossite scripting with /servlet/Spy...
CVE-2006-6960
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...
CVE-2006-6959
WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry keys...
CVE-2006-6961
WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detection by changing a file's name...
CVE-2006-6961
WebRoot Spy Sweeper 4.5.9 and earlier fails to detect malware based on file contents, allowing remote attackers to bypass malware detection by renaming a file. Connected documents specify that detection is blocked only by filename and that multiple archive formats are not supported. Affected prod...
CVE-2006-6960
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...
CVE-2004-2676
The Spy Sweeper Enterprise Client SpySweeperTray.exe in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges...
CVE-2006-6959
WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry keys...
CVE-2004-2676
The CVE-2004-2676 issue affects WebRoot Spy Sweeper, specifically the SpySweeperTray.exe component in Spy Sweeper before version 2.0. The vulnerability is that it does not drop privileges when using the help functionality, allowing local users to gain privileges. The available sources identify th...
CVE-2006-6960
The CVE concerns WebRoot Spy Sweeper (Compression Sweep) prior to version 4.5.9 failing to handle non-ZIP archives. Specifically, the feature does not process archives in RAR, GZ, TAR, CAB, or ACE formats, which can allow remote attackers to bypass malware detection. Affected component: Compressi...
CVE-2006-6959
The CVE-2006-6959 entry concerns WebRoot Spy Sweeper (4.5.9 and earlier). The vulnerability allows local users to bypass the Startup-Shield security restrictions by modifying certain registry keys, i.e., a local-privilege impact via registry edits. The available documents specify the affected pro...
CVE-2006-6961
WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detection by changing a file's name...
JavaScript execution in mail via XBL — Mozilla
Georgi Guninski demonstrated that even with JavaScript disabled in mail the default an attacker can still execute JavaScript when a mail message is viewed, replied to, or forwarded by putting the script in a remote XBL file loaded by the message. The executed script could be used to alter or chan...
BlueSpy-adv-multibanners.txt
SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz, http://blue-spy.net Greetz: h4ntu , Fungky, Solpot, Matdhu...
Mambo Component multibanners 1.0.1 - Remote File Inclusion
SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz, http://blue-spy.net Greetz: h4ntu , Fungky, Solpot, Matdhu...
Mambo Component multibanners 1.0.1 - Remote File Inclusion
Mambo Component multibanners 1.0.1 - Remote File Inclusion SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz,...