MS Internet Explorer 6.0 (mshtml.dll datasrc) Denial of Service Vuln

No description provided by source. table datasrc="." milw0rm.com 2005-12-27...

e-publish CMS vuln.

e-publish CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/e-publish-cms-vuln.html vendor:http://www.e-publish.gr/ affected version:v2.0 and prior Product Description: The e-publish web application is a content management system that is...

CF_Nuke v4.6 Multiple vuln.

CFNuke v4.6 Multiple vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html vendor:http://www.mycfnuke.com/ affected version:v4.6 and prior Product Description: CFNuke is a free easy-to-setup & easy-to-use open source...

DRZES HMS 3.2 Multiple vuln.

DRZES HMS 3.2 - Hosting Management System -multiple SQL inj. vuln. and XSS vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html Vendor:http://drzes.com/ affected version:3.2 and prior Product description: Increase...

CVE-2005-3455

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln 1 APPS01 in Application Install; 2 APPS02 and 3 APPS03 in Application Object Library; 4 APPS05 and 5 APPS06 in Applications...

CVE-2005-3461

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln PSE01...

CVE-2005-3458

Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.9 has unknown impact and attack vectors, as identified by Oracle Vuln APPS19 in Workflow Cartridge...

CVE-2005-3462

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln PSE02...

CVE-2005-3452

Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown impact and attack vectors, as identified by Oracle Vuln AS13...

CVE-2005-3463

Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln PSE03...

CVE-2005-3448

Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln AS01...

CVE-2005-3456

CVE-2005-3456 describes multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications versions 11.5 through 11.5.9. Affected components include APPS04 in Application Object Library and APPS17/APPS18/APPS21 in Workflow Cartridge. The Initial Description states unknown impact and...

CVE-2005-3440

Technical details about CVE-2005-3440 are not provided in the supplied documents. No affected product/version or concrete impact is documented here; monitor for updates.

CVE-2005-3442

Technical details about CVE-2005-3442 are not publicly available in the provided documents. No specific impact, affected components, or remediation are given. Monitor for updates and new disclosures.

NOD32 Antivirus ARJ Archive Filename Handling Overflow

The remote host is running NOD32 Antivirus, from eset. The installed version of NOD32 Antivirus is reportedly prone to a heap-based buffer overflow when processing ARJ archives with long filenames. An attacker may be able to exploit this issue to execute arbitrary code on the remote host. C Tenab...

FtpLocate 2.02 - current Remote Command Execution

FtpLocate 2.02 - current Remote Command Execution Alot of code for a cgi | vuln. /str0ke !/usr/bin/perl FtpLocate newPeerAddr = $host, PeerPort = 80, Proto = "tcp" or die "socket: "; sub ch2hex $chr = $0; $out=""; for$i=0;$i; print "remote file: "; chomp$rfile = ; my $socket = &mysocket$host; pri...

CVE-2004-2173

CVE-2004-2173 affects EarlyImpact ProductCart (advSearch_h.asp) where the priceUntil parameter enables SQL injection, allowing remote execution of arbitrary SQL commands. Root cause: unsafely concatenated input in the SQL query. Impact per sources: partial confidentiality, integrity, and availabi...

USN-103-1: Linux kernel vulnerabilities

Mathieu Lafon discovered an information leak in the ext2 file system driver. When a new directory was created, the ext2 block written to disk was not initialized, so that previous memory contents which could contain sensitive data like passwords became visible on the raw device. This is...

ssh-1.2.27.txt

------------------------------------------------------------------- Periodically, the moderator of of the vuln-dev mailing list will post summaries of issues discussed there to Bugtraq and possibly other relevant lists. This will usually happen when an issue has been resolved, or it appears that...

Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the correct port must be specified and a...