MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)

Exploit for unknown platform in category remote exploits ============================================================ MS Windows JPEG GDI+ Remote Heap Overflow Exploit MS04-028 ============================================================ / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes...

CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

YaPiG 0.92 - Remote Server-Side Script Execution

source: https://www.securityfocus.com/bid/10891/info A vulnerability is reported to exist in YaPiG that may allow a remote attacker to execute malicious scripts on a vulnerable system. This issue exists due to a lack if sanitization of user-supplied data. It is reported that an attacker may be ab...

osTicket STS 1.2 - Attachment Remote Command Execution

source: https://www.securityfocus.com/bid/10586/info osTicket is reported prone to a remote command execution vulnerability. The issue is reported to present itself because attachments submitted as a part of a support ticket request are stored with a predictable name in a known web accessible...

cadaver heap-based buffer overflow

Background cadaver is a command-line WebDAV client. Description Stefan Esser discovered a vulnerability in the code of the neon library see GLSA 200405-13. This library is also included in cadaver. Impact When connected to a malicious WebDAV server, this vulnerability could allow remote execution...

cPanel 5/6/7/8/9 - Login Script Remote Command Execution

source: https://www.securityfocus.com/bid/9855/info A potential remote command execution vulnerability has been discovered in the cPanel application. This issue occurs due to insufficient sanitization of externally supplied data to the login script. An attacker may exploit this problem by craftin...

CVE-2004-0073

PHP remote file inclusion vulnerability in 1 config.php and 2 configpage.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edprelativepath parameter to reference a URL on a remote web server that contains a malicious serverdata.php script...

[OpenPKG-SA-2003.047] OpenPKG Security Advisory (postgresql)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2003.047 30-Oct-2003 Package: postgresql Vulnerability: remote code execution OpenPKG...

Gallery 1.4 including file vulnerability

Gallery 1.4 including file vulnerability -Background Information- Gallery is a Web-based software product that lets you manage photos on any Web site that offers PHP support. With Gallery you can easily create and maintain albums of photos via an intuitive interface. Photo management includes...

CVE-2003-0331

SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page...

[SECURITY] [DSA 296-1] New kdebase packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 296-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...

CVE-2002-0006

XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variabl...

ActivePerl findtar Sample Script Remote Command Execution

The remote host is running a version of ActiveState Perl which is affected by a remote command execution flaw. An attacker could exploit this flaw in order to execute arbitrary commands in the context of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit a...

Slurp 1.10 - SysLog Remote Format String

Slurp 1.10 - SysLog Remote Format String source: https://www.securityfocus.com/bid/4935/info slurp is a freely available, open source NNTP client. It is designed for use on most Unix and Linux operating systems. It may be possible for a remote server to execute code on a vulnerable client. slurp...

FreeBSD-SA-02:10.rsync

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:10 Security Advisory FreeBSD, Inc. Topic: rsync port contains remotely exploitable vulnerability Category: ports Module: rsync Announced: 2002-02-06 Credits: Sebastian...

CVE-2001-0712

The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text .txt, JPEG .jpg, et...