CVE-2009-2024: Undefined Security Weakness

Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt...

VT-Auth 1.0 File Disclosure

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@ @=Script : VT-Auth v1.0 @=S.Site :...

VT-Auth 1.0 (zHk8dEes3.txt) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================= VT-Auth 1.0 zHk8dEes3.txt File Disclosure Vulnerability ========================================================= @email protected @=Script : VT-Auth v1.0 @=S.Site :...

VT-Auth 1.0 (zHk8dEes3.txt) File Disclosure Vulnerability

No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@...

VT-Auth 1.0 - zHk8dEes3.txt File Disclosure

VT-Auth 1.0 - zHk8dEes3.txt File Disclosure @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@...

VT-Auth 1.0 - 'zHk8dEes3.txt' File Disclosure

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@ @=Script : VT-Auth v1.0 @=S.Site :...

Debian Security Advisory DSA 957-1 (imagemagick)

The remote host is missing an update to imagemagick announced via advisory DSA 957-1. Florian Weimer discovered that delegate code in ImageMagick is vulnerable to shell command injection using specially crafted file names. This allows attackers to encode commands inside of graphic commands. With...

Fedora Core 6 : kernel-2.6.22.14-72.fc6 (2007-759)

Update to Linux 2.6.22.14: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.10 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.11 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.12 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.13...

CVE-2007-5791

The CVE-2007-5791 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD failing to verify that SIP INVITE messages originate from a legitimate server, enabling remote attackers to spoof INVITEs. This can trigger a flood of messages causing a denial of service and may facilitate calls with m...

CVE-2007-5792

The CVE-2007-5792 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD, where RTP packets are not encrypted. This allows remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session. CVSSv2 base score: 7.1 (HIGH); vector: AV:N/AC:M/Au:N/C:C/I:N/A:N. No explicit ...

CVE-2007-5792: Undefined Security Weakness

The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session...

CVE-2007-5791: Improper Authentication

The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with...

MDKA-2007:077 : console-tools

vt-is-UTF8 utility included in console-tools package, and used by Mandriva initscripts, can hang, causing random problems like preventing a local/remote system reboot, unless user take interactive action 27948. Also, when executed on a terminal different from a linux vt, it can cause errors and...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

CVE-2006-6532

CVE-2006-6532 is an XSS issue affecting Vt-Forum Lite 1.3 and earlier. Connected docs confirm exploitable via (1) StrMsg/Topic_ID parameters to vf_info.asp, vf_newtopic.asp, vf_settings.asp, and vf_replytopic.asp (and references to CVE-2006-6447). Root cause is insufficient input sanitization lea...

CVE-2006-6532: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

CVE-2006-6448

Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the user parameter to vfmemberdetail.asp, and other unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6447

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via 1 the StrMes parameter in vfinfo.asp and possibly 2 a URL in the SRC attribute of an IFRAME element that is submitted to vfnewtopic.asp...

CVE-2006-6449

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from thir...