2940 matches found
BadBlue < 2.3 ISAPI Module Remote Administrative Interface Access
Binary data 2177.prm...
Samba Printer Change Notification DoS
DoS on FindNextPrintChangeNotify request processing...
popper_mod < 1.2.3 Administration Authentication Bypass
Binary data 1588.prm...
BeyondTrust Retina Scanner Detection
Binary data 9060.prm...
Winamp MIDI Plugin Track Size Overflow
Binary data 1952.prm...
Web Server SSLv1 Detection
Binary data 1135.prm...
BeyondTrust Retina Scanner Detection
Binary data 1158.prm...
[Full-Disclosure] iDEFENSE Security Advisory 08.16.04: CVS Undocumented Flag Information Disclosure Vulnerability
CVS Undocumented Flag Information Disclosure Vulnerability iDEFENSE Security Advisory 08.16.04 www.idefense.com/application/poi/display?id=130&type=vulnerabilities August 16, 2004 I. BACKGROUND CVS Concurrent Versions System is an open-source network-transparent version control system. II...
SQL Server Detection
Binary data 2131.prm...
Fortify 360 Web Interface Detection
Binary data 5007.prm...
Potential Microsoft SQL Injection Vulnerability Detection
Binary data 2002.prm...
GoScript go.cgi Arbitrary Command Execution
The remote host is running GoScript. The installed version fails to properly sanitize user-supplied input to the 'go.cgi' script. An unauthenticated, remote attacker could exploit this flaw to execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
BasiliX login.php3 username Variable Arbitrary Command Execution
The remote host appears to be running a version of BasiliX between 1.0.2beta or 1.0.3beta. In such versions, the script 'login.php3' fails to sanitize user input, which enables a remote attacker to pass in a specially crafted value for the parameter 'username' with arbitrary commands to be execut...
CVE-2004-0701
Sun Ray Server Software SRSS 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access...
Re: [Full-Disclosure] THE VULNERABILITY STILL WORKS AFTER TODAY'S PATCH
Well it's not quite as easy as you make it sound I think you only took a look at http-equiv's example I posted to full disclosure and based your post on that. You see this: --snip-- iframe src="c:windowswebtip.htm" style="width:400px;height:200px;"/iframe textarea id="code" style="display:none;"...
[Full-Disclosure] iDEFENSE Security Advisory 06.08.04: Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability
Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.08.04 www.idefense.com/application/poi/display?id=107&type=vulnerabilities June 8, 2004 I. BACKGROUND Squid is a fully-featured Web Proxy Cache designed to run on Unix systems and supports...
Open WebMail Multiple Content Header XSS
The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross- site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary JavaScript code by reading a MIME message with a specially crafted...
Zaep AntiSpam Cross Site Scripting
Crossite scripting in /?key= parameter...
NexGen FTP Server directory traversal
No description provided...
SquidGuard 1.x - NULL URL Character Unauthorized Access
source: https://www.securityfocus.com/bid/9919/info Reportedly SquidGuard is prone to a remote NULL URL character unauthorized access vulnerability. This issue is due to a failure of the application to properly filter out invalid URIs. Successful exploitation of this issue may allow a remote...