666 matches found
FtpLocate 2.02 - current Remote Command Execution
FtpLocate 2.02 - current Remote Command Execution Alot of code for a cgi | vuln. /str0ke !/usr/bin/perl FtpLocate newPeerAddr = $host, PeerPort = 80, Proto = "tcp" or die "socket: "; sub ch2hex $chr = $0; $out=""; for$i=0;$i; print "remote file: "; chomp$rfile = ; my $socket = &mysocket$host; pri...
CVE-2004-2173
CVE-2004-2173 affects EarlyImpact ProductCart (advSearch_h.asp) where the priceUntil parameter enables SQL injection, allowing remote execution of arbitrary SQL commands. Root cause: unsafely concatenated input in the SQL query. Impact per sources: partial confidentiality, integrity, and availabi...
USN-103-1: Linux kernel vulnerabilities
Mathieu Lafon discovered an information leak in the ext2 file system driver. When a new directory was created, the ext2 block written to disk was not initialized, so that previous memory contents which could contain sensitive data like passwords became visible on the raw device. This is...
ssh-1.2.27.txt
------------------------------------------------------------------- Periodically, the moderator of of the vuln-dev mailing list will post summaries of issues discussed there to Bugtraq and possibly other relevant lists. This will usually happen when an issue has been resolved, or it appears that...
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the correct port must be specified and a...
