Knusperleicht Shoutbox 2.6 - Shout.php HTML Injection

Knusperleicht Shoutbox 2.6 - Shout.php HTML Injection source: https://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute...

PT-2006-5723 · Python +1 · Python +1

Name of the Vulnerable Software and Affected Versions: Python versions 2.3 through 2.6 before 20060822 Description: A buffer overflow issue exists in the repr function, allowing context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character...

Ay System CMS 2.6 - main.php Remote File Inclusion

Ay System CMS 2.6 - main.php Remote File Inclusion ============================================================================================== Ay System Solutions CMS ================================================================================================ Exploit :...

AySystem.txt

============================================================================================== Ay System Solutions CMS ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...

Ay System CMS 2.6 - 'main.php' Remote File Inclusion

============================================================================================== Ay System Solutions CMS ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...

MttKe-php.txt

TitLe : Xss in MttKe-php v2.6 eXpLoIt : http://target/path/components/polls?p=poll&topic=alert By : R0t-KeY --- s33 u ;...

CVE-2005-1229

CPIO (GNU cpio) prior to version 2.6 is affected by CVE-2005-1229, a directory-traversal flaw that lets an attacker write to arbitrary directories during extraction via a .. path in an archive. The root cause is that cpio does not sanitise extracted paths (even with --no-absolute-filenames). Cons...

Linux kernel file offset pointer races

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Linux kernel file offset pointer handling Product: Linux kernel Version: 2.4 up to to and including 2.4.26, 2.6 up to to and including 2.6.7 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0016-procleaks.txt CVE:...

DSA-427 linux-kernel-2.4.17-mips+mipsel - missing boundary check

Bulletin has no description...

Solaris 2.5.1 - License Manager

source: https://www.securityfocus.com/bid/461/info The Solaris License Manager that ships with versions 2.5.1 and 2.6 is vulnerable to multiple symlink attacks. License Manager creates lockfiles owned by root and set mode 666 which it writes to regularily. It follows symlinks. bash$ ls -l...