4254 matches found
Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/edit.asp?ID' SQL Injection
source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...
Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection
Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issu...
Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/view.asp?searchFor' SQL Injection
source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...
Mozilla Firefox <= 1.5.0.2 (js320.dll/xpcom_core.dll) Denial of Service PoC
No description provided by source. !-- --------------------------------------------------- Software: Firefox Web Browser Tested: Linux, Windows clients' version 1.5.0.2 Result: Firefox Remote Code Execution and Denial of Service - Vendor contacted, no patch yet. Problem: A handling issue exists i...
Mozilla Firefox 1.5.0.2 - 'js320.dll/xpcom_core.dll' Denial of Service (PoC)
...
Winmail Server Webmail Unspecified Vulnerability
The remote host is running Winmail Server, a commercial mail server for Windows from AMAX Information Technologies. According to its version number, the remote installation of Winmail Server is affected by an unknown issue in its webmail component. It is unclear whether this is the same issue...
SynchronEyes Student Detection
The remote host is running SMART Technologies SynchronEyes Student. This software allows teacher to remotely control student desktops and/or allow students to join a class. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21217; scriptversion "1.9"; scriptcvsdate"Date:...
SynchronEyes Teacher Detection
The remote host is running SMART Technologies SynchronEyes Teacher. This software allows teachers to remotely control student desktops. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21218; scriptversion "1.10"; scriptcvsdate"Date: 2019/10/01 11:24:12";...
SMART Technologies SynchronEyes Remote Denial of Services
Title: SMART Technologies SynchronEyes Remote Denial of Services Release Date: 04. April 2006 Author: Dennis Elser dennis backtrace de Vendor: SMART Technologies Inc. http://www.smarttech.com Vendor Status: Notified, fixes scheduled for May Product: SynchronEyes Student and Teacher Affected...
SMART Technologies SynchronEyes Student and Teacher classroom software DoS
UDP/5496 large packet DoS...
KLA10320 Vulnerability in Van Dyke Technologies
An unspecified vulnerability was found in SecureCRT & SecureFX. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products SecureCRT SecureFX CVE list CVE-2006-1038 critical...
[SLAB] NetBSD / OpenBSD kernfs_xread patch evasion
--- SecurityLab Technologies, Inc. --- Security Advisory --- http://www.securitylab.net Advisory Name: NetBSD / OpenBSD kernfsxread patch evasion Release Date: February 02, 2006 Application: kernfs Platform: NetBSD / OpenBSD Severity: Severe Author: SLAB Research Vendor Status: Patched Reference:...
CVE-2006-0248
CVE-2006-0248 concerns Virata-EmWeb web server 6_1_0 used in Intracom JetSpeed 500/520 and Allied Data CopperJet 811 RouterPlus. The vulnerability allows remote attackers to access privileged information (e.g., user lists, configuration settings) via direct HTTP requests. The connected documents ...
CVE-2006-0248
Virata-EmWeb web server 610, as used in 1 Intracom JetSpeed 500 and 520 and 2 Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests...
M.Neset KABAKLI
I.Vulnerability H-Sphere Hosting Control Panel Cross Site Scripting Vulnerability II.Vendor Positive Software www.psoft.net III.Affected Systems H-Sphere = 2.4.3 Patch 8 IV.About H-Sphere is a scalable multiserver web hosting control panel that provides complete hosting automation for Linux, BSD ...
Ideal BB.NET 1.3 XSS vuln
Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...
[Full-disclosure] Buffer Overflow in MultiTech VoIP Implementations
SecurityLab Technologies, Inc. --- www.securitylab.net --- Security Advisory Advisory Name: Buffer Overflow in MultiTech VoIP Implementations Release Date: December 05, 2005 Application: MultiVoIP Gateway Platform: Multiple Severity: Moderate Author: Ejovi Nuwere SLABresearchATsecuritylab.net...
CVE-2005-3988
SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-3988
SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-3988
CVE-2005-3988 affects Pineapple Technologies Lore 1.5.4; the vulnerability is an SQL injection in article.php via the id parameter. This allows remote command execution against the database. The provided sources (e.g., NVD) confirm the vulnerability and its high impact (CVSS v2 base score 7.5, wi...