CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-2048

Multiple cross-site scripting XSS vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 port, 2 server, and 3 user parameters. NOTE: it is possible that the affected version is actually 3.2...

Microsoft Commerce Server 2002: Logon as known user with a false password

Microsoft Commerce Server 2002: Logon as known user with a false password Vulnerable: Microsoft Windows Server 2000/2003 + Internet Information Server 5/6 + Commerce Server 2002 Discussion: Microsoft Commerce Server is used by company's who want to give customers the opportunity to change there o...

KLA10320 Vulnerability in Van Dyke Technologies

An unspecified vulnerability was found in SecureCRT & SecureFX. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products SecureCRT SecureFX CVE list CVE-2006-1038 critical...

[Full-disclosure] Mac OS X - malloc() local privilege escalation vulnerability.

Suresec Security Advisory - 00007 25/09/2005 Mac OS X - malloc insecure use of environment variable. Advisory: http://www.suresec.org/advisories/adv7.pdf Description: The malloc function on Mac OS X insecurely trusts a debug variable, regardless of the fact that the calling application may be sui...

[ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition

Suresec Security Advisory - 00004 10/07/05 Linux kernel ia32 compatibility race condition Advisory: http://www.suresec.org/advisories/adv4.pdf http://www.suresec.org/advisories/adv3.pdf Description: A race condition vulnerability has been found in the ia32 compatibility execve systemcall. The rac...

Van Dyke SecureCRT < 4.1.9 Telnet URI Remote Command Execution

Binary data 2427.prm...

CVE-2002-1059

The CVE-2002-1059 vulnerability affects Van Dyke/ SecureCRT SSH client via a remote buffer overflow caused by an overly long SSH1 protocol version string. Affected versions include SecureCRT before 3.4.6 and 4.x before 4.0 beta 3, enabling the SSH server to potentially execute arbitrary code. Mit...

CVE-2002-1059

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string...

Local root vulnerability in most used Linux kernels

There is a zeroday exploit for kernel in hands of scriptkiddies. After they rooted locally 2 system which I've intrest and did dd if=/dev/zero of=/dev/hda1 & on both, I spended 7 hours to finding fragments we really need easies tools LDE with GUI block search capabilities This with help of Peter ...