313 matches found
NetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities
NetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15737/info NetAuctionHelp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
TClanPortal 1.1.3 - id SQL Injection
TClanPortal 1.1.3 - id SQL Injection TClanPortal Version 3 .. Search By Google :- by TriggerTG.de 2003 - Version 3 Gr33tz :- Abducter .. SQL Injection's FOunder - | [email protected] |- Devil-00 .. SQL Injection's Exploting - | [email protected] | - Security4Arab .. A'Where Home .. WE LOV...
GForge 3.x - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/13716/info GForge is affected by a remote command execution vulnerability. This issue arises because the application fails to sanitize user-supplied data passed through URI parameters. An attacker can supply arbitrary shell commands through the affected...
[SA15425] SurgeMail Unspecified Cross-Site Scripting Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
NTP Server Protocol Version 3 Detection
Binary data 1148.prm...
SNMP Version 3 Detection
Binary data 1120.prm...
Distributed Network Protocol Version 3 (DNP3) Outstation Detection (SCADA)
Binary data 3553.prm...
KPhone 2.x/3.x/4.0.1 - Malformed STUN Packet Denial of Service
source: https://www.securityfocus.com/bid/10159/info A denial of service vulnerability has been reported in KPhone. This issue may be triggered by a malformed SIP Session Initiation Protocol STUN message. This is due to insufficient validation of user-specified STUN packet attribute lengths,...
STunnel 3.x - Client Negotiation Protocol Format String
// source: https://www.securityfocus.com/bid/3748/info Stunnel is a freely available, open source cryptography wrapper. It is designed to wrap arbitrary protocols that may or may not support cryptography. It is maintained by the Stunnel project. Stunnel does not properly handle unexpected input b...
CVE-2000-0967
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs...
Microsoft IIS 3.04.0 - Upgrade BDIR.HTR
Microsoft IIS 3.04.0 - Upgrade BDIR.HTR source: https://www.securityfocus.com/bid/2280/info Microsoft Internet Information Server IIS 3.0 came with a series of remote administration scripts installed in /scripts/iisadmin off the web root directory. ism.dll is required for processing these scripts...
PT-1998-1026 · Slmail · Slmail
Name of the Vulnerable Software and Affected Versions: SLmail versions 3.x Description: A buffer overflow issue in SLmail allows attackers to execute commands by using a large FROM line. Recommendations: For SLmail versions 3.x, update to a version that fixes this issue to prevent command executi...
