2150 matches found
ESMI PayPal StoreFront 1.7 - Cross-Site Scripting
ESMI PayPal StoreFront 1.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/12904/info ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...
[SA14527] Novell iChain Administrator Session Hijacking Vulnerability
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
Einstein 1.01 - Local Password Disclosure (ASM)
; Nothing Special other than the program doesnt encode the user/pass in the registry. ; Einstein v1.01 - http://www.Bfriendly.com some crappy file school sharing program ; made because i think C is overkill for these types of local exploits, ; shit we can does this in vbs/bat too if ya want...
MediaWiki: Multiple vulnerabilities
Background MediaWiki is a collaborative editing software, used by big projects like Wikipedia. Description A security audit of the MediaWiki project discovered that MediaWiki is vulnerable to several cross-site scripting and cross-site request forgery attacks, and that the image deletion code doe...
Logon with wrong user/password gives 'weird' errorpage.
Error screen after wrong login is 'weird'...
Siteman <= 1.1.10 Remote Administrative Account Addition Exploit
Exploit for unknown platform in category web applications ================================================================ Siteman use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...
CVE-2005-0002
poppassdpam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users...
WS_FTP Server <= 5.03 (RNFR) Buffer Overflow Exploit
No description provided by source. ===== Start WSFTPOverflow.pl ===== Usage: WSFTPOverflow.pl ip ftp user ftp pass WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...
Netbilling NBMEMBER Script - Information Disclosure
source: https://www.securityfocus.com/bid/11504/info Netbilling 'nbmember.cgi' script is reported prone to an information disclosure vulnerability. This issue may allow remote attackers to gain access to user authentication credentials and potentially sensitive configuration information...
CUPS: Leakage of sensitive information
Background The Common UNIX Printing System CUPS is a cross-platform print spooler. Description When printing to a SMB-shared printer requiring authentication, CUPS leaks the user name and password to a logfile. Impact A local user could gain knowledge of sensitive authentication data. Workaround...
Debian DSA-229-1 : imp - SQL injection
Jouko Pynnonen discovered a problem with IMP, a web-based IMAP mail program. Using carefully crafted URLs a remote attacker is able to inject SQL code into SQL queries without proper user authentication. Even though results of SQL queries aren't directly readable from the screen, an attacker migh...
Debian DSA-218-1 : bugzilla - XSS
A cross site scripting vulnerability has been reported for Bugzilla, a web-based bug tracking system. Bugzilla does not properly sanitize any input submitted by users for use in quips. As a result, it is possible for a remote attacker to create a malicious link containing script code which will b...
bbsEMarket.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20040915-07 BBS E-Market Professional multiple vulnerabilities Revision 1.0 Date Published: 2004-09-15 KST Last Update: 2004-09-15 Disclosed by SSR Team [email protected] Abstract ======== BBS E-MarketBobusang in Kore...
Password Protect XSS and SQL-Injection vulnerabilities.
CRIOLABS - Software: Password protect - Type: User Authentication - Company: Web Animations - Date: 30-8-2004 Software Software: Password protect Versions: All Languaje: ASP Plataforms: Win nt, 2000, xp Web: http://www.webanimations.com.au/ The ultimate protection including unlimited user names a...
passprotect.txt
CRIOLABS - Software: Password protect - Type: User Authentication - Company: Web Animations - Date: 30-8-2004 Software Software: Password protect Versions: All Languaje: ASP Plataforms: Win nt, 2000, xp Web: http://www.webanimations.com.au/ The ultimate protection including unlimited user names a...
CVE-2002-0444
Technical details about CVE-2002-0444 are not provided in the supplied documents. The description notes that Windows 2000 Terminal Server SYSVOL policy application can fail when connections exceed a maximum; monitor for official updates.
[SA12407] Password Protect Multiple Vulnerabilities
TITLE: Password Protect Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12407 VERIFY ADVISORY: http://secunia.com/advisories/12407/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of system information, Exposure of sensitive information WHERE: From remote...
SWsoft Plesk Reloaded 7.1 - 'Login_name' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11024/info It is reported that Plesk Reloaded may be affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a...
OpenFTPD <= 0.30.1 (message system) Remote Shell Exploit
Exploit for linux platform in category remote exploits ======================================================== OpenFTPD = 0.30.1 message system Remote Shell Exploit ======================================================== / shouts to mitakeet :D exploit for openftpd format string bug. tested on...
Comersus Cart 5.0 - SQL Injection
source: https://www.securityfocus.com/bid/10824/info Comersus Cart is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query. The problem presents itself...