8679 matches found
CVE-2006-0793
CVE-2006-0793 concerns V-webmail 1.6.2. The vulnerability is in frameset.php, where a remote attacker can trigger phishing by supplying arbitrary websites in the rframe parameter. The exploit details and exact impact are described only as phishing via rframe; no further root-cause specifics or af...
[SA18776] V-webmail Cross-Site Scripting and Path Disclosure
TITLE: V-webmail Cross-Site Scripting and Path Disclosure SECUNIA ADVISORY ID: SA18776 VERIFY ADVISORY: http://secunia.com/advisories/18776/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: V-webmail 1.x...
V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/16706/info V-webmail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...
V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities
V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16706/info V-webmail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these...
CVE-2004-2629
CVE-2004-2629 describes multiple vulnerabilities in the H.323 protocol implementation used by First Virtual Communications Click to Meet Express (and related products) that allow remote attackers to cause denial of service, demonstrated via the H.225 protocol test suite (PROTOS). The affected com...
Zina SQL injection vulnerability.
Zina SQL injection vulnerability. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zina-sql-injection-vulnerability.html Vendor:http://www.pancake.org/zina/ affected version: Zina v.0.12.07 and prior. Vuln. description: Input passed to the "p"...
Oracle 9i Application Server SOAP Default Configuration Vulnerability - Active Check
In a default installation of Oracle 9i Application Server AS v.1.0.2.2, it is possible to deploy or undeploy SOAP services without the need of any kind of credentials. SPDX-FileCopyrightText: 2003 Javier Fernandez-Sanguino Some text descriptions might be excerpted from a referenced sources, and a...
POP3 Server type and version
This detects the POP3 Server SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10185";...
Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt3
Oct. 11, 2005 Dmitry V. Levin 0.9.7g-alt3 - Applied upstream fix for potential SSL 2.0 rollback during SSL handshake CAN-2005-2969...
Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln?
Well I ran quake 2 using Lithium mod V 1.24 under OllyDBG and it seems that the lithium II mod for quake 2 latest PATCH 3.20 is parsing the '' in nicks. My well crafted nickname '999fffff' is being pushed onto the stack as 004144A1 |. 68 E821AF00 PUSH QUAKE2.00AF21E8 ; ASCII "0.000000 0.000000...
USN-157-1: Mozilla Thunderbird vulnerabilities
Vladimir V. Perepelitsa discovered a bug in Thunderbird's handling of anonymous functions during regular expression string replacement. A malicious HTML email could exploit this to capture a random block of client memory. CAN-2005-0989 Georgi Guninski discovered that the types of certain XPInstal...
CVE-2001-1507
OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...
CVE-2001-1507
Technical details are not publicly available in the provided documents. Monitor for updates.
Slackware 9.1 / current : utempter security update (SSA:2004-110-01)
New utempter packages are available for Slackware 9.1 and -current to fix a security issue. Slackware 9.1 was the first version of Slackware to use the libutempter library, and earlier versions of Slackware are not affected by this issue The utempter package provides a utility and shared library...
Security fix for the ALT Linux 6 package sudo version 1:1.6.7p5-alt5
June 21, 2005 Dmitry V. Levin 1:1.6.7p5-alt5 - Backported upstream fix so a sudoers entry with sudo ALL no longer overwrites the value of safecmnd CAN-2005-1993...
bkforum4.txt
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple Sql injection...
MetaCart E-Shop V-8 - 'StrCatalog_NAME' SQL Injection
source: https://www.securityfocus.com/bid/13377/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may exploit this issue to manipulate SQL...
MetaCart E-Shop V-8 - IntProdID SQL Injection
MetaCart E-Shop V-8 - IntProdID SQL Injection source: https://www.securityfocus.com/bid/13376/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attack...
Multiple Sql injection vulnerabilities in BK Forum v.4
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple Sql injection...
[SECURITY] [DSA 698-1] New mc packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 698-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...