CVE-2004-1662

YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message...

[UNIX] JShop Cross Site Scripting

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Immunity Canvas: NSS

Name| nss ---|--- CVE| CVE-2004-0826 Exploit Pack| CANVAS Description| NSS overflow Notes| CVE Name: CVE-2004-0826 VENDOR: Mozilla References: http://www.osvdb.org/displayvuln.php?osvdbid=9116 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0826 Date public: 23 of August, 2004...

abctab2ps 1.6.3 - 'Trim_Title' '.ABC' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12028/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that th...

[EXPL] Foxmail FROM Field Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[UNIX] KPhone STUN DoS (Malformed STUN Packets)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Ethereal - EIGRP Dissector TLV_IP_INT Long IP Remote Denial of Service

Ethereal - EIGRP Dissector TLVIPINT Long IP Remote Denial of Service / Ethereal network protocol analyzer EIGRP Dissector TLVIPINT Long IP Address Overflow vulnerability proof of concept code version 1.0 Mar 26 2004 by Rmi Denis-Courmont www simphalempin com dev This vulnerability was found by:...

CVE-2004-0011

Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code...

CVE-2003-1379

clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters 1 A, which reveals the date and time, 2 F, 3 M, which reveals 'ifconfig' information, 4 P, which lists the processes, 5 Y, which reveals the snort log files, or 6 b,...

iSoft-Solutions QuikStore Shopping Cart 2.12 - 'template' Directory Traversal

source: https://www.securityfocus.com/bid/9283/info It has been reported that QuikStore Shopping Cart may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '../' character sequences. The issue exists due to insufficie...

iSoft-Solutions QuikStore Shopping Cart 2.12 - store Full Path Disclosure

iSoft-Solutions QuikStore Shopping Cart 2.12 - store Full Path Disclosure source: https://www.securityfocus.com/bid/9282/info It has been reported that QuikStore Shopping Cart may be prone to an information disclosure vulnerability due to insufficient sanitization of user-supplied data through th...

Tcpdump 3.x - L2TP Parser Remote Denial of Service

Tcpdump 3.x - L2TP Parser Remote Denial of Service source: https://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a...

Получение доступа к панели администрирования в Willwin's Web Voting v.1.0

Получение доступа к панели администрирования в Willwin's Web Voting v.1.0 Название скрипта: Willwin's Web Voting Уязвимая версия: v.1.0 Сайт производителя: http://willwin.plex.ru Автор: [email protected] Дата: 13th December 2003 Пароль для получения доступа к панели управления голосованием в...

Koch Roland Rolis Guestbook 1.0 - $path Remote File Inclusion

Koch Roland Rolis Guestbook 1.0 - $path Remote File Inclusion source: https://www.securityfocus.com/bid/9054/info It has been reported that Rolis Guestbook may be vulnerable to an input validation issue that may allow an attacker to include malicious files containing arbitrary code to be executed...

ShoutCast server 1.9.2/win32

Informations : °°°°°°°°°°°° Language : Microsoft Visual C++ v5.0/v6.0 MFC Bugged Version : ShoutCast server 1.9.2/win32 and less ? Patched version : none Website : http://www.shoutcast.com Problems : DoS if we know the password from the server Objects : °°°°°°° - scserv.exe vulnerable variable:...

iPlanet Web Server Enterprise Edition URL-encoded Host: Information Disclosure

According to its self reported version number, the remote iPlanet web server is affected by an information disclosure vulnerability wherein a remote user can retrieve sensitive data from memory allocation pools or cause a denial of service against the server. Since Nessus solely relied on the...

TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6

TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6 contributed by: rushjo ========================================================================= Tripbit Security Advisory TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6...

[argv] BitchX-353 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Mon Feb 17 15:26:06 EST 2003 1. Topic: BitchX IRC Client 2. Relevant versions: Vulnerable: BitchX-75p3 BitchX-1.0c16 BitchX-1.0c19 BitchX-1.0c20cvs Not Vulnerable: BitchX-1.0c18 3. Problem description: A denial of service vulnerability exists in BitchX. Sending ...

anhttpd141c_exploit.java

Advisory Information -------------------- Name : AN HTTPD Vendor Homepage : http://www.st.rim.or.jp/nakata/ Platforms : Windows9x/Me/NT/2000/XP Vulnerability Type : stack overflow very easy to exploit Vendor Contacted : 17/10/2002 Vendor Replied : 20/10/2002 Vulnerable Versions : 1.30 to 1.41c No...

Pablo Sofware Solutions FTP server Directory Traversal Vulnerability

Pablo Sofware Solutions FTP server Directory Traversal Vulnerability .oO Overview Oo. Pablo Software Solutions FTP server version 1.0 build 9 shows files and directories that reside outside the normal FTP root directory. Discovered on 2002, July, 20th Vendor: Pablo Software Solutions Pablo's FTP...