Fortinet FortiSwitch Weak Password Vulnerability

Fortinet FortiSwitch is a suite of secure switching platforms from Fortinet, Inc. designed for Ethernet infrastructure and current network edge configurations. A weak password vulnerability exists in Fortinet FortiSwitch versions prior to 3.4.1. An attacker could exploit the vulnerability to log ...

AZL-6953 CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

AZL-40745 CVE-2011-2501 affecting package syslinux for versions less than 6.04-11

The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...

AZL-34843 CVE-2007-4998 affecting package kernel for versions less than 6.6.35.1-4

cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination...

AZL-34672 CVE-2007-6109 affecting package emacs for versions less than 29.1-1

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service application crash and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval...

AZL-6828 CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

xoops-xfsection.txt

XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug : http://www.site.com/modules/xfsection/modify.php?dirmodule=evilcode.txt? Shoutz t0 :...

AZL-35079 CVE-2007-2768 affecting package openssh for versions less than 9.5p1-2

OpenSSH, when using OPIE One-Time Passwords in Everything for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords OTP, a similar issue to CVE-2007-2243...

Konversation IRC Client < 0.15.1 Multiple Remote Vulnerabilities

Binary data 2547.prm...

Owl < 0.74.0 Multiple Vulnerabilities

Binary data 2479.prm...

Moodle < 1.4.3 Glossary Module SQLi

Binary data 2388.prm...

Quicktime < 6.5.2

The remote Mac OS X host is running a version of Quicktime that is older than Quicktime 6.5.2. The remote version of this software reportedly fails to check bounds properly when decoding BMP images, leading to a heap overflow. If a remote attacker can trick a user into opening a maliciously craft...

WordPress < 1.2.1 'wp-login.php' HTTP Response Splitting

Binary data 2356.prm...

IBM DB2 < 8.2 Multiple Vulnerabilities (2) (deprecated)

Binary data 2349.prm...

Kerio MailServer < 6.0.3 Unspecified Vulnerability

The remote host is running a version of Kerio MailServer prior to 6.0.3. There is an undisclosed flaw in the remote version of this server that might allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid15404;...

Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS

Binary data 2275.prm...

PostgreSQL < 7.2.3 Multiple Vulnerabilities

Binary data 1892.prm...

Powie PHP Forum < 1.15 Multiple Vulnerabilities

Binary data 1732.prm...

War FTP Daemon < 1.66x4 USER/PASS Command Overflow

Binary data 1830.prm...

Samba-TNG < 0.3.1 Multiple Vulnerabilities (deprecated)

Binary data 1341.prm...