CVE-2006-0691

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account...

CVE-2006-0691: Undefined Security Weakness

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account...

CVE-2006-0690: Undefined Security Weakness

Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-0689: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter...

The Bat! mail agent headers spoofing

message/partial format alows to spoof message headers completely, making it impossible to track sender by Received or Message-ID headers...

tor hidden services information disclosure

It's possible to discover location of hidden service by setting up malicious tor server, accessing hidden service repeatedly and tracking who builds circuits...

DSA-944-1 mantis - several

Bulletin has no description...

interspireXSS.txt

I.Vulnerability Interspire TrackPoint NX Cross Site Scripting Vulnerability II.Vendor Interspire www.interspire.com III.Affected Systems - Interspire TrackPoint NX 0.1 IV.About TrackPoint is a web based sales tracking software. V.Description An attacker is able to inject HTML and client-side scri...

Interspire TrackPoint NX XSS Vulnerability

I.Vulnerability Interspire TrackPoint NX Cross Site Scripting Vulnerability II.Vendor Interspire www.interspire.com III.Affected Systems - Interspire TrackPoint NX 0.1 IV.About TrackPoint is a web based sales tracking software. V.Description An attacker is able to inject HTML and client-side scri...

Bugzilla bug tracking system symbolic links vulnerability

syncshadowdb script symbolic links problem...

CVE-2005-4248

CVE-2005-4248 : Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via fields in (1) communication/subscribers.tracking.add.php, (2) support/tickets.add.php, and (3) mycompany/categories.php. The description across ...

CVE-2005-4248

Multiple cross-site scripting XSS vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via various fields, such as those in 1 communication/subscribers.tracking.add.php, 2 support/tickets.add.php, and 3 mycompany/categories.php...

[DRUPAL-SA-2005-007] Drupal 4.6.4 / 4.5.6 fixes XSS issue

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2005-007 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2005-007 Project: Drupal core Date: 2005-11-30 Security risk: less critical...

[SECURITY] [DSA 905-1] New mantis packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 905-1 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...

DSA-905-1 mantis - several

Bulletin has no description...

CVSTrac invalid ticket DoS

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to invalid tickets that may allow an attacker to cause the application to crash. An attacker, exploiting this flaw, would be able to remotely shut down the...

CVSTrac filediff vulnerability

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version of filediff has a flaw in the input sanitation which, when exploited, can lead to a remote attacker executing arbitrary commands on the system. OpenVAS has determined the vulnerability...

TeeKai Tracking Online XSS

The remote host runs Teekai Tracking Online, a PHP script used for tracking the number of user's on a Web site. This version is vulnerable to cross-site scripting attacks. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. OpenVAS...

CVSTrac history.c history_update function overflow

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the historyupdate function in history.c that may allow an attacker to cause a buffer overflow and execute arbitrary code on the remote system. OpenVAS has...

Gator/GAIN Spyware Installed

The remote host has Gator/GAIN Spyware Installed. Gator tracks the sites that users visit and forwards that data back to the company's servers. Gator sells the use of this information to advertisers. It also lets companies launch a pop-up ad when users visit various Web sites. This software is no...