6867 matches found
KLA10152 ACE vulnerability in SFTP
A format string was found in the multiple SFTP products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Exploitation Related products SSH-Secure-Shell-for-Workstations...
[SA18589] Kerio WinRoute Firewall Web Browsing Denial of Service
TITLE: Kerio WinRoute Firewall Web Browsing Denial of Service SECUNIA ADVISORY ID: SA18589 VERIFY ADVISORY: http://secunia.com/advisories/18589/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Kerio WinRoute Firewall 6.x http://secunia.com/product/3613/ DESCRIPTION: A vulnerabili...
PT-2006-1288 · Helm · Helm Web Hosting Control Panel
Name of the Vulnerable Software and Affected Versions: Helm Hosting Control Panel versions 3.2.8 and earlier Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the txtEmailAddress parameter in the...
KLA10231 DoS vulnerability in browser
An unspecified vulnerability was found in the browsers. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed web site. Original advisories - Exploitation Related products Mozilla-Firefox K-Meleon Netsca...
[SA17528] Campsite MySQL Password Exposure Mail Transfer Security Issue
TITLE: Campsite MySQL Password Exposure Mail Transfer Security Issue SECUNIA ADVISORY ID: SA17528 VERIFY ADVISORY: http://secunia.com/advisories/17528/ CRITICAL: Not critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Campsite 2.x http://secunia.com/product/6091/...
Tiki Wiki CMS Groupware < 1.7.8 'tiki-error.php' XSS Vulnerabilities
Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MySQL < 3.23.56 'mysqld' Privilege Escalation Vulnerability
MySQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2005 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...
Zeroboard < 4.1pl5 Multiple Vulnerabilities - Active Check
Zeroboard is prone to arbitrary PHP code execution and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PT-2005-3585 · Apache +2 · Mod Ssl +3
Name of the Vulnerable Software and Affected Versions: mod ssl versions prior to 2.8.24 Description: The issue arises from the improper enforcement of access restrictions in mod ssl when "SSLVerifyClient optional" is set in the global virtual host configuration and "SSLVerifyClient require" is se...
[SA15857] Emilda User Management Security Bypass Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
KLA10185 Multiple vulnerabilities in Groove
Multiple serious vulnerabilities have been found in Groove products. Malicious users can exploit these vulnerabilities to obtain sensitive information, inject web scripts, bypass security restrictions and spoof filenames. Below is a complete list of vulnerabilities 1. Improper file extension...
Picasm 1.10/1.12 - Error Generation Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/13698/info Picasm is affected by a remote buffer overflow vulnerability. An attacker can exploit this issue by supplying an excessive 'error' directive. If successfully exploited, this issue can allow a remote attacker to gain access to the affected...
web-app.org WebAPP Encoded Request .dat File Disclosure
According to its banner, the remote host is running a version of WebAPP that suffers from an unspecified file disclosure vulnerability. An attacker may be able to use this flaw to disclose the contents of 'dat' files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
KLA10272 ACE vulnerability in NetTerm
A buffer overflow was found in NetTerm. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed command. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list CVE-2005-13...
KLA10405 ACE vulnerability in Xpand Rally
A format string vulnerability was found in Xpand Rally. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially defined message. Original advisories - Exploitation Public exploits exist for this vulnerability. Relat...
IMP common-footer.inc Parent Frame Page Title XSS
According to its version, the remote installation of IMP fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...
[SA14813] Adobe Reader Local Files Detection Weakness
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Adobe Reader Local Files Detection Weakness SECUNIA...
[SA14688] Double Choco Latte Cross-Site Scripting and PHP Code Execution
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Double Choco Latte Cross-Site Scripting and PHP Code...
[SA14554] Phorum Unspecified Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
[SA14401] iPhoto CopperExport Plugin "xp_publish.php" SQL Injection
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...