1938 matches found
phpGiftReq.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: phpGiftReq SQL Injection Vulnerability discovery: Madelman Date: 16/01/2005 Severity: Moderately critical Summary: - -------- The PHP Gift Registry is a web-enabled gift registry intended for use among a circle of family members or friends from...
Portcullis Security Advisory 05-006
Portcullis Security Advisory Vulnerable System: Webseries Payment Application Vulnerability Title: Directory & File Enumeration Via Reporting System Vulnerability discovery and development: Portcullis Security Testing Services Affected systems: Bottomline Webseries Payment Application Details: By...
sphpBlog037.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Simple PHP Blog directory traversal vulnerability Vulnerability discovery: Madelman Date: 02/01/2005 Severity: Moderate Summary: - -------- I started this project because I wanted a dead-simple blog. Something that didn't require a database, us...
QWikiwiki directory traversal vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: QWikiwiki directory traversal vulnerability Vulnerability discovery: Madelman madelman AT iname.com Date: 01/01/2005 Severity: Critical Summary: - -------- QwikiWiki is driven by one core design goal: simplicity. This design goal is codified in...
DSA-551-1 lukemftpd - incorrect internal variable handling
Bulletin has no description...
Mandrake Linux Security Advisory : kernel (MDKSA-2001:079-2)
Alexander Viro discovered a vulnerability in the devfs implementation that is shipped with Mandrake Linux 8.1. We are aware of the problem and are currently working on a solution. As a workaround, until an update becomes available, please boot with the devfs=nomount option. Rafal Wojtczuk found a...
ADVISORY: ASPDOTNETSTOREFRONT Improper Upload Validation
ASPDOTNETSTOREFRONT Improper Upload Validation Release Date: June 9, 2004 Severity: HIGH Vendor: AspDotNetStorefront.com A Division of Discovery Productions, Inc. Software: Tested on AspDotNetStorefront 3.3 Previous versions may also be affected. Remote: Remotely executed from any web browser...
SMF SIZE Tag Script Injection Vulnerability
Advisory Name : SMF SIZE Tag Script Injection Vulnerability Release Date : May 3,2004 Application : Simple Machines Test On : SMF 1.0 Beta 5 Public Vendor URL : http://www.simplemachines.org/ Discover : Cheng Peng Suapplesoupatmsn.com Intro: The team that has brought you YaBB SE has moved on to...
lftp 2.6.9 - Remote Stack Overflow
/ lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf src/HttpDir.cc. This bad coded...
Remote and Local Vulnerabilities In WS_FTP Server
hi dear i am pejman.d ,i finded the new bug in wsftp server Vulnerable Systems : wsftp server 4,3 the bug is buffer overflow in ftp command service stop and some error step by step buffer overflow : 1- login to ftp server by any username and password 2- use the quote command for send the command ...
Adobe SVG Viewer Cross Domain and Zone Access (GM#004-MC)
GreyMagic Security Advisory GM004-MC ===================================== By GreyMagic Software, Israel. 07 Oct 2003. Available in HTML format at http://security.greymagic.com/adv/gm004-mc/. Topic: Adobe SVG Viewer Cross Domain and Zone Access. Discovery date: 07 Sep 2003. Affected applications:...
OpenSSHPAM 3.6.1p1 - Remote Users Discovery Tool
OpenSSHPAM 3.6.1p1 - Remote Users Discovery Tool / SSHBRUTE - OpenSSH/PAM Proof of concept code by Maurizio Agazzini Tested against Red Hat, Mandrake, and Debian GNU/Linux. Reference: http://lab.mediaservice.net/advisory/2003-01-openssh.txt $ tar xvfz openssh-3.6.1p1.tar.gz $ patch -p0 include...
Solaris /bin/login (SPARC/x86) - Remote Code Execution
/ 7350963 - /bin/login remote root explot SPARC/x86 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. C COPYRIGHT TESO Security, 2001 All Rights Reserved bug found by scut 2001/12/20 thanks to halvar,scut,typo,random,edi,xdr. special thanks to...
Cayman gateways are vulnerable to a denial of service via a portscan
Overview Cayman gateways are vulnerable to a denial of service. An attacker can send a number of TCP connect requests or SYN packets, in conjunction with a "Bouncing" vulnerability, and can cause a denial of service to the gateway. Description The gateway will crash after receiving a number of TC...
Solaris mailx Vulnerability
Vulnerability in Solaris mailx1 Date Published: April 11, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris mailx1 Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The mai...
