1224 matches found
ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability. EMC Identifier: ESA-2011-021 CVE Identifier: CVE-2011-1742 Severity Rating: CVSS v2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: EMC SW: EMC Dat...
Safari < 5.1 Multiple Vulnerabilities
Binary data 800988.prm...
DEBIAN-CVE-2011-2665
reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a SIP packet with a Contact header that lacks a less than character...
Citrix ICA Client Multiple Remote Code Execution Vulnerabilities
The version of Citrix ICA Client installed on the remote host is older than 12.0.3. Such versions are reportedly affected by the following remote code execution vulnerabilities: A vulnerability can be exploited by tricking a user into connecting to a malicious server, via a malicious '.ICA' file ...
PT-2010-3395 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4 Description: The issue concerns the WebKit component in Apple iOS, which fails to enforce proper boundary restrictions on content displayed by an IFRAME element. This allows remote attackers to spoof the user...
Squid < 3.0.STABLE24 / 2.7.STABLE8 / 2.6.STABLE24
According to its banner, the version of the Squid proxy caching server installed on the remote host is older than 3.0.STABLE24 / 2.7.STABLE8 / 2.6.STABLE24. Such versions de-reference a NULL pointer while handling certain Hypertext Caching Protocol HTCP requests. This mishandling can be abused by...
adnforums-insecure.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum eNYe-Sec - www.enye-sec.org Cookie is base64 based and the ascii format used is: user:23ed4e45887ad4311ff654bd4aab6540:user:0 user:md5 pass:user:0 Programmer forgot to check the pass and only use the nick to autenticate the user...
OpenSSH X11 < 5.1 Session Hijacking
Binary data 4598.prm...
ClipShare < 3.0.1 (tid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== ClipShare 3.0.1 tid Remote SQL Injection Vulnerability ========================================================== // / / / Clipshare / / / / Remote SQL Injection Vulnerability / / ...
clipshare301-sql.txt
// / / / Clipshare / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr DORK : "powered by clipshare" VERSION : less than v3.0.1 EXPLOIT :...
PT-2008-1129 · Openbsd +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 4.4 through 4.7 OpenSSH versions prior to 4.9 Description: The issue concerns multiple vulnerabilities in the OpenSSH package that can be exploited to compromise the confidentiality, integrity, and availability of protected...
Debian Security Advisory DSA 173-1 (bugzilla)
The remote host is missing an update to bugzilla announced via advisory DSA 173-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KLA10411 LPE vulnerability in ZoneAlarm
An unspecified vulnerability was found in ZoneAlarm. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed IRP. Original advisories - Exploitation Related products ZoneAlarm CVE list CVE-2007-4216 high Solution...
Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit
No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...
CVE-2006-3123
Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...
Sql injection
SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery CSIG aka PHP thumbnail Photo Gallery 3.1g and earlier allows remote authenticated users to execute arbitrary SQL commands via the limitquerys parameter when the $projectid variable is less than 1, which prevents...
CVE-2005-2213
Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...
FileZilla FTP Server < 0.9.6 Multiple DoS
Binary data 2738.prm...