6485 matches found
SilverStream database structure
It is possible to download the remote SilverStream database structure by requesting : http://www.example.com/SilverStream/Meta/Tables/?access-mode=text An attacker may use this flaw to gain more knowledge about this host. Reference : http://online.securityfocus.com/archive/101/144786 OpenVAS...
MacOS X Finder '.DS_Store' Information Disclosure
MacOS X creates a hidden file SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10756";...
SilverStream database structure
It is possible to download the remote SilverStream database structure by requesting : http://www.example.com/SilverStream/Meta/Tables/?access-mode=text SPDX-FileCopyrightText: 2002 Tor Houghton Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
SQLQHit Directory Structure Disclosure
The Sample SQL Query CGI is present. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10765";...
Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)
Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...
CVE-2004-2498
Technical details (affected product, exact vulnerability, impact, and fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2004-2498: Undefined Security Weakness
Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors...
SYS component of the whole hand free kill Kabbah success-vulnerability warning-the black bar safety net
It is well known pcshare of the drive stage Assembly pchide. sys has been difficult to locate,difficult to modify and famous After two weeks of trying,I finally will be this challenge to overcome! Technical information can disclose some,first select the object is the card bar Kabbah adopted a...
CVE-2005-1978
CAN-2005-1978 pertains to a COM+ vulnerability in Windows (MS04-era MS05-051 context) where the COM+ component creates/uses memory structures in a way that could allow remote code execution and local privilege escalation. The linked MS05-051 bulletin confirms affected platforms include Windows 20...
Mandrake Linux Security Advisory : slocate (MDKSA-2005:147)
A bug was discovered in the way that slocate processes very long paths. A local user could create a carefully crafted directory structure that would prevent updatedb from completing its filesystem scan, resulting in an incomplete database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Fedora Core 3 : mailman-2.1.5-32.fc3 (2005-242)
A cross-site scripting XSS flaw in the driver script of mailman prior to version 2.1.5 could allow remote attackers to execute scripts as other web users. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-1177 to this issue. Users of mailman should upda...
Fedora Core 4 : slocate-2.7-22.fc4.1 (2005-770)
A carefully prepared directory structure could stop the updatedb file system scan, resulting in an incomplete slocate database. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2499 to this issue. Note that Tenable Network Security has extracted the preceding...
CVE-2004-2388
The vulnerability CVE-2004-2388 affects the AIX 4.3.3 rexecd component. It stems from not properly using a local copy of the pwd structure when calling getpwnam, allowing the authenticate function to overwrite the pwd data and potentially assign privileges to the wrong user. This creates a privil...
Hosting Controller 6.1 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/14258/info Hosting Controller is prone to an SQL injection vulnerability. This issue allows a remote attacker to manipulate query structure and logic. It has been reported that the attacker may gain unauthorized access to sensitive information. Other...
CVE-2005-2052
Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...
CVE-2005-2052
Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...
Stream / Raped Denial of Service Attack (win version)
Exploit for multiple platform in category dos / poc ===================================================== Stream / Raped Denial of Service Attack win version ===================================================== / Straped 1.0 author: Marco Del Percio 20/05/2005 Remember: this is a mulithreaded...
CVE-2005-0210
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...
CVE-2005-0210
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...