OwnServer10.txt

Application: OwnServer Used By Security Cameras Products Vendors: http://www.anteco.co.il Big Resellers: http://www.anykeeper.com http://www.sahar-systems.co.il Versions: = 1.0 Platforms: Windows Bug: Directory Transversal Vulnerability Risk: High Exploitation: Remote with browser Date: 25 Dec 20...

Multiple vulnerabilities in WWW Fileshare Pro <= 2.42

Luigi Auriemma Application: WWW File Share Pro http://www.wfshome.com Versions: = 2.42 Platforms: Windows Bugs: - arbitrary server's files overwriting - remote crash - directory authorization bypass Risk: critical Exploitation: remote Date: 14 Jan 2004 Author: Luigi Auriemma e-mail:...

Hi

Application: KpyM telnet server v1.05 Url: http://kpym.sourceforge.net/ Versions: = 1.05 Platforms: Windows Bug: Socket flood bug Risk: High Exploitation: Remote Date: 3 Gen 2004 Author: NoRpiUs e-mail: [email protected] web: http://norpius.altervista.org 1 Introduction 2 Bug 3 The Code 4 Fi...

dcamwebcam.txt

Luigi Auriemma Application: DCAM WebCam server http://www.hyperionx.com http://sourceforge.net/projects/dcamserver/ Versions: = 8.2.5 Platforms: Windows Bug: Directory traversal bug Risk: high Exploitation: remote with browser Date: 22 Dec 2003 Author: Luigi Auriemma e-mail: [email protected]...

IBM Directory Server 4.1 Web Admin Gui (ldacgi.exe) XSS Vulnerability

IBM Directory Server 4.1 Web Admin Gui ldacgi.exe XSS Vulnerability ===================================================================== During the audit of 3rd party product, based on IBM Directory Server, i found a cross site scripting vulnerability on IBM's Directory Server 4.1 Web Admin Gui...

Opera 7.x - Directory Traversal

source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to another file on the system usin...

Webwasher Classic Error-Message XSS Vulnerability

Webwasher Classic Error-Message XSS Vulnerability ================================================= Description =========== WebWasher Classic is vulnerable to a XSS attack. If a HTTP GET-Request, containing script code, is sent to the proxy port default 8080/TCP, an error page is shown, which...

Webwasher Classic Error-Message XSS Vulnerability

Webwasher Classic Error-Message XSS Vulnerability ================================================= Description =========== WebWasher Classic is vulnerable to a XSS attack. If a HTTP GET-Request, containing script code, is sent to the proxy port default 8080/TCP, an error page is shown, which...

Gamespy3d <= 263015 lets code execution through long IRC answer

Luigi Auriemma Application: Gamespy 3d http://www.gamespy3d.com Versions: = 263015 Platforms: Windows Bug: Code execution through memory corruption caused by long data from IRC server Risk: Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introductio...

Sun ONE/iPlanet Web Server vulnerable to DoS

Overview A vulnerability in the SunOne/iPlanet Web Server may allow a remote attacker to cause a denial of service. Description The SunOne/iPlanet Web Server contains a vulnerability which may allow a remote attacker to disrupt the normal operation of the web server. This vulnerability is only...

Half-Life clients: buffer-overflow

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD Platforms: Windows Bugs: Remote buffer overflow Risk: High Author: Auriemma Luigi Senior Security Researcher, PivX Solutions, LLC e-mail...

e107 website system Vulnerability

Informations : Advisory Name: e107 website system Vulnerability Author: hiruvim [email protected] Discover by: hiruvim [email protected] Website vendor : http://e107.org Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to get MySQL...

ZH2003-11SA (security advisory): Elite News Ver. 1.0.0.0-1.0.0.3 Beta

Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory: http://www.zone-h.org/en/advisories/read/id=2710 Author: Trash-80 -...

Another ProductCart SQL Injection Vulnerability

ProductCart SQL Injection Vulnerability 1ndonesian Security Team 1st http://bosen.net/releases/ =============================================================================== Security Advisory Advisory Name: ProductCart SQL Injection Vulnerability Release Date: 06/20/2003 Application: ProductCar...

Real Server < 8.0.2 Remote Exploit (Windows Platforms)

Exploit for unknown platform in category remote exploits ====================================================== Real Server 8.0.2 Remote Exploit Windows Platforms ====================================================== // / THCunREAL 0.2 - Wind0wZ remote root exploit / / Exploit by: Johnny Cyberpu...

Positive Technologies SA2003-0310: DoS-attack in VisNetic ActiveDefense

Positive Technologies Security Advisory http://www.ptsecurity.com Title: DoS-attack in VisNetic ActiveDefense Date: March, 10 2003 Severity: High Application: VisNetic ActiveDefense 1.3.1 and early Platform: Windows 95/98/ME/NT/2000/XP Vendor Status: Notified, patched I. DESCRIPTION -------------...

Edonkey and Overnet resources consumption

Applications: Edonkey2000 http://www.edonkey2000.com Overnet http://www.overnet.com Versions: 0.45 and previous versions only the GUI program Platforms: Windows only Bug: The programs spawn a new dialog for each chat message that arrives to them, and each dialog take system resources Risk:...

[Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download

Hi, all. We release the information about the vulnerability of Opera, here. And we hope that this vulnerability be fixed by Vendor immediately. ----------------------------------------------------------------- Synopsis: Opera 7/6 Long Filename Buffer Overflow Vulnerability in Download Product:...

Opera 6.07.0 - Filename Download Buffer Overrun

Opera 6.07.0 - Filename Download Buffer Overrun source: https://www.securityfocus.com/bid/7056/info A buffer overrun vulnerability has been discovered in the Opera web browser. The issue affects Opera versions 6 and 7 on the Microsoft Windows platform. Due to insufficient bounds checking when...

Opera 6.0/7.0 - 'Filename Download' Buffer Overrun

source: https://www.securityfocus.com/bid/7056/info A buffer overrun vulnerability has been discovered in the Opera web browser. The issue affects Opera versions 6 and 7 on the Microsoft Windows platform. Due to insufficient bounds checking when copying file names to a temporary buffer it may be...