2306 matches found
Unfixed XSS vulnerability at www.tripple.net
Security researcher TraCK10ya, has submitted on 01/02/2008 a cross-site-scripting XSS vulnerability affecting www.tripple.net, which at the time of submission ranked 42651 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/03/2008. It is...
DTSA-98-1 emacs21 - buffer overflow
Bulletin has no description...
Unfixed XSS vulnerability at www.minria.com
Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.minria.com, which at the time of submission ranked 1197510 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/09/2007. It is...
Unfixed XSS vulnerability at www.cior.pt
Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.cior.pt, which at the time of submission ranked 7363861 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is current...
Unfixed XSS vulnerability at www.mccahonhouse.org.nz
Security researcher CoNqUeRoR, has submitted on 03/07/2007 a cross-site-scripting XSS vulnerability affecting www.mccahonhouse.org.nz, which at the time of submission ranked 10972070 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007. I...
KLA10122 SB vulnerability in Comodo Firewall Pro
An unspecified vulnerability was found in Comodo Firewall Pro. By exploiting this vulnerability malicious users can bypass the driver protection for registry keys. This vulnerability can be exploited locally at a point related to OLE NamedPipe. Original advisories - Exploitation Public exploits...
Socketwiz BookMarks 2.0 - 'root_dir' Remote File Inclusion
!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Socketwiz Bookmarks perl exploit.pl http://site.com/Socketwiz BookmarksPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda =...
CVE-2005-0255
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstringCharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execut...
HP-UX Security patch : PHNE_17098
The remote host is missing HP-UX Security Patch number PHNE17098 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16938; scriptversion"1.7";...
HP-UX Security patch : PHCO_10061
The remote host is missing HP-UX Security Patch number PHCO10061 . Security Vulnerability in vgdisplay command %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16885;...
PerlDesk kb.cgi view Parameter SQL Injection
The remote host is running PerlDesk, a web-based helpdesk application written in Perl. The remote version of this software has several SQL injection vulnerabilities, that could allow an attacker to execute arbitrary SQL statements on the remote database. %NASLMINLEVEL 70300 C Tenable Network...
[SA14124] Mambo Global Variables Security Bypass Vulnerability
TITLE: Mambo Global Variables Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14124 VERIFY ADVISORY: http://secunia.com/advisories/14124/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Mambo 4.x http://secunia.com/product/872/ DESCRIPTION: A vulnerability...
[SA13843] Squid Username Whitespace Security Bypass Issue
TITLE: Squid Username Whitespace Security Bypass Issue SECUNIA ADVISORY ID: SA13843 VERIFY ADVISORY: http://secunia.com/advisories/13843/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Squid 2.x http://secunia.com/product/310/ DESCRIPTION: A security issue has...
CVE-2001-1413
...
CVE-2002-1581
...
Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass
Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using ...
[SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 551-1 [email protected] http://www.debian.org/security/ Martin Schulze September 21st, 2004 http://www.debian.org/security/faq -...