FreeBSD : evolution -- remote format string vulnerabilities (e5afdf63-1746-11da-978e-0001020eed82)

A SITIC Vulnerability Advisory reports : Evolution suffers from several format string bugs when handling data from remote sources. These bugs lead to crashes or the execution of arbitrary assembly language code. - The first format string bug occurs when viewing the full vCard data attached to an...

AWStats 6.5 vuln.

AWStats 6.5 vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://awstats.sourceforge.net affected versions:AWStats 6.5 build 1.857 and previous orginal advisory:http://pridels.blogspot.com/2006/04/awstats-65-vuln.html Vuln. Description: AWStats contains a flaw that allows a remot...

Absolute Live Support XE V2.0 XSS vuln.

Absolute Live Support XE V2.0 XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor:http://www.xigla.com/absolutels/index.htm affected versions:V2.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html Vuln. Description: Absolute Live...

Cerberus FTP Server 2.32 - Denial of Service

Cerberus FTP Server 2.32 - Denial of Service / Cerberus FTP Server 2.32 Denial of Service original advisory: http://kapda.ir/advisory-210.html cerberus232dosremotexpl.c / include include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip,...

HostingCart XSS

HostingCart XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hostingcart-xss.html vendor:www.zaygo.com/hosting-tools/hostingcart/ affected version:2.0 and prior Product Description: Zaygo HostingCart is a complete shopping cart, designed...

ActiveCampaign SupportTrio SQL inj.

ActiveCampaign SupportTrio SQL inj. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/activecampaign-supporttrio-sql-inj.html Vendor:http://www.activecampaign.com/supporttrio/ affected version: 1.4 and prior Vuln. description: Input passed to the...

[security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00557788 Version: 1 HPSBPI02078 SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server J7961A Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as...

EasyPageCMSXSS.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 015 ------------------------------------------------------ Date - 11/2005 EasyPageCMS Cross Site Scripting AFFECTED PRODUCTS ================= EasyPageCMS http://www.davehusk.com Xss Poof: ======== poof:...

[Full-disclosure] Evolution multiple remote format string bugs

SITIC Vulnerability Advisory Advisory Name: Evolution multiple remote format string bugs Advisory Reference: SA05-001 Date of initial release: 2005-08-10 Product: Evolution 1.5, 2.0, 2.1, 2.2, 2.3 Platform: Linux, BSD systems, Unix Effect: Remote code execution Vulnerability Identifier: Not...

Interspire ArticleLive 2005 XSS problem

"Critical Security" advisory 001 www.critical.lt - security today Vulnerable product: Interspire ArcticleLive 2005 latest url: http://www.interspire.com/articlelive/demo.php Vulnerability type: Cross Site Scripting Risk: very low Credits: "Critical Security", website: http://www.critical.lt The...

NISCC Vulnerability Advisory IPSEC - 004033

Abstract: Three attacks that apply to certain configurations of IPsec have been identified. These configurations use Encapsulating Security Payload ESP in tunnel mode with confidentiality only, or with integrity protection being provided by a higher layer protocol. Some configurations using AH to...

Salim Gasmi GLD (Greylisting Daemon) 1.x - Postfix Greylisting Daemon Buffer Overflow

// source: https://www.securityfocus.com/bid/13129/info It is reported that GLD contains a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure that a fixed-size memory buffer is sufficiently large prior to copying user-supplied input data into it...

[SA14554] Phorum Unspecified Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Knet <= 1.04c Buffer Overflow Bug

-=--------------------ADVISORY-------------------=- -= =- -= Knet = 1.04c =- -= =- -= Author: CorryL [email protected] =- -= x0n3-h4ck.org=- -=-----------------------------------------------------=- -=+ Application: Knet -=+ Version: 1.04c -=+ Vendor's URL: www.stormystudios.com -=+ Platform:...

cms.core.txt

/==========================================/ // GHC - CMS CORE - ADVISORY // Product: CMS Core // URL: http://chipmunk-scripts.com/scripts/cmscore.php // VULNERABILITY CLASS: SQL injection /==========================================/ exploit Log in with username Administrator'/ from admin/index.p...

MyPHP Forum 1.0 - SQL Injection

/==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit member.php?action=viewpro&member=nonexist' UNION...

[Full-Disclosure] Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability

Finjan Security Advisory Microsoft Office XP Remote Buffer Overflow Vulnerability Introduction Finjan has discovered a new vulnerability in Microsoft Word XP that would allow a hacker to launch a buffer overflow attack. This attack could occur when a user opened a Word document using Internet...

MSN Heartbeat Control Buffer Overflow

NGSSoftware Insight Security Research Advisory Name: MSN Heartbeat Control Buffer Overflow Systems Affected: Microsoft Internet Explorer with the MSN Heartbeat Control Severity: High Vendor URL: http://zone.msn.com/ Author: John Heasman [email protected] Date of Public Advisory: 19th January...

ss11012005.txt

/ / / \ / / / / / \ \ \ \ / / / / / \ / / // / / / / / / / / / // // / / / // / / / / // , / // / /// // //// // ,/ // / // \ / / / // / / // / /// , / // Ref: SS11012005 SYSTEMSECURE.ORG - Advisory/Exploit PUBLIC ADVISORY Software: MPM Guestbook Pro 1.05 maybe all versions Link:...

Oracle clear text passwords (#NISR2122004D)

NGSSoftware Insight Security Research Advisory Name: Oracle 10g clear text passwords Systems Affected: Oracle 10g on all operating systems Severity: Medium Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...