4253 matches found
[SA13137] Infuseum ASP Message Board Unspecified Cross-Site Scripting and SQL Injection
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
Hawking Technologies HAR11A router considered insecure
The Hawking Technologies HAR11A modem//router is shipped insecure. It suffers from the infamous Conexant security hole http://www.chiark.greenend.org.uk/theom/security/origo.html . You can find lots of references to this in a google search for "conexant port 254". You can see the Hawking...
CVE-2004-1637
The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to port 254, which displays a management interface and information on established connections...
[SA12844] AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection
TITLE: AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA12844 VERIFY ADVISORY: http://secunia.com/advisories/12844/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: AliveSites Forum 2.x...
[SA12834] NatterChat Unspecified SQL Injection Vulnerability
TITLE: NatterChat Unspecified SQL Injection Vulnerability SECUNIA ADVISORY ID: SA12834 VERIFY ADVISORY: http://secunia.com/advisories/12834/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Natterchat 1.x http://secunia.com/product/4060/ DESCRIPTION: Positiv...
gosmart.txt
This vulnerability was discovered by Positive Technologies using MaxPatrol www.maxpatrol.com - intellectual professional security scanner. It is able to detect a substantial amount of vulnerabilities not published yet. MaxPatrol's intelligent algorithms are also capable to detect a lot of...
Microsoft Window Management API Local Privilege Escalation Vulnerability
Description Microsoft has reported that several unspecified Window Management API functions can allow a local attacker to change the attributes of an application with higher-level privileges to gain elevated privileges on a vulnerable computer. This issue represents a fundamental design flaw;...
Microsoft NNTP Component Heap Overflow Vulnerability
Description The Microsoft Network News Transfer Protocol NNTP Component is prone to a buffer overflow condition. Successful exploitation of this vulnerability could allow remote code execution in the context of the process accessing the vulnerable component. Technologies Affected Avaya DefinityOn...
Microsoft Windows Kernel Local Denial of Service Vulnerability
Description The Microsoft Windows kernel is prone to a denial-of-service vulnerability that can allow a local attacker to cause a vulnerable computer to stop responding and to restart. This issue does not pose a privilege-escalation threat. Technologies Affected Avaya DefinityOne Media Servers...
Microsoft Windows Kernel Virtual DOS Machine Privilege Escalation Vulnerability
Description Microsoft Windows Kernel Virtual DOS Machine is reported prone to a local privilege-escalation vulnerability. The Microsoft Virtual DOS Machine VDM is a protected environment that emulates MS-DOS on Windows NT-based operating systems. This issue is caused by an access-validation error...
[Full-Disclosure] Multiple vulnerabilities in w-agora forum
http://www.maxpatrol.com/mpadvisory.asp Title: Multiple vulnerabilities in w-agora forum Date: 28.09.04 Severity: Medium Application: w-agora 4.1.6a, http://www.w-agora/en/download.php Platform: PHP I. DESCRIPTION Multiple vulnerabilities were found in w-agora forum. A remote user can conduct SQL...
Microsoft GDI+ Library JPEG Segment Length Integer Underflow Vulnerability
Description Microsoft Graphics Device Interface GDI+ JPEG handler is reported prone to an integer underflow vulnerability when handling JPEG format images. This issue presents itself due to a lack of sufficient sanity checks performed on certain JPEG data before this data employed as a bounds val...
Skype Technologies URI Handler Remote Code Execution
Binary data 4531.prm...
Microsoft Window Utility Manager Local Elevation of Privileges
Microsoft Window Utility Manager Local Elevation of Privileges July 13, 2004 Credit: This vulnerability was researched and discovered by Cesar Cerrudo. Risk Level: High Summary: A local elevation of privileges exists in the Windows Utility Manager which allows any user to take complete control ov...
Microsoft Windows SSL Library Denial of Service Vulnerability
Description Microsoft Windows SSL library is reported to be prone to a denial of service vulnerability. It has been reported that an attacker could trigger this issue by sending a specially crafted TCP message that causes the protocol to fail resulting in a denial of service. Successful...
Microsoft Windows Management Local Privilege Escalation Vulnerability
Description Microsoft Windows Management is prone to a local privilege-escalation vulnerability that may allow a local attacker to execute arbitrary attacker-supplied code with SYSTEM privileges. Technologies Affected Avaya DefinityOne Media Servers Avaya IP600 Media Servers Avaya S3400 Message...
Microsoft Jet Database Engine Remote Code Execution Vulnerability
Description It has been reported that Microsoft Jet Database Engine Jet is prone to a remote code execution vulnerability that that may allow remote attackers to execute arbitrary code in order to gain unauthorized access to a vulnerable system. This issue presents itself when a specially crafted...
CVE-2003-1463
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to 1 determine the installation path by reading the contents of the Name parameter in a link, and 2 read arbitrary files via an absolute path in the Name...
mdaemon-raw.txt
Hat-Squad Security Team Advisory http://www.hat-squad.com Product: Alt-N Technologies Mdaemon Mail Server Version: MDaemon 6.85 and Below to 6.52 Vulnerability: Remote buffer overflow in Raw Message Handler Release Date: 12/29/2003 Vendor Status: Informed on 29 Dec 2003 Quick response on 29 Dec...
DCE RPC Vulnerabilities New Attack Vectors Analysis
Date Published: 2003-12-10 Last Update: 2003-12-10 Advisory ID: CORE-2003-12-05 Title: DCE RPC Vulnerabilities New Attack Vectors Analysis Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft . Core notification: 2003-12-09 . Notification acknowledged by Microsoft:...