2423 matches found
Solaris 10 (SPARCx86) - sysinfo Kernel Memory Disclosure
Solaris 10 SPARCx86 - sysinfo Kernel Memory Disclosure / 07/2006: public release SPARC Solaris 10 without 118833-09 x86 Solaris 10 without 118855-06 Solaris sysinfo Kernel Memory Disclosure By qaaz / include include include include include include define PAGECOUNT 1000 int mainint argc, char argv...
Code injection
The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service CPU consumption, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."...
Code injection
The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service CPU consumption, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."...
nabopoll 1.1.2 sensitive file (admin without password)
nabopoll 1.1.2 sensitive file admin without password By : sn0oPy Risk : high site : http://nabocorp.com/ Dork : inurl:"nabopoll/" exploit : acces without password to : http://target/nabopoll/admin/configedit.php http://target/nabopoll/admin/templateedit.php...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
Exploit for linux platform in category dos / poc ====================================================== Axigen include include include include include include include define BUFSIZE 1024 define BBUFSIZE BUFSIZE/34+1 define AUTHCMD "1 AUTHENTICATE PLAIN\r\n" define APPENDCMD "2 APPEND...
BELL-CVE-2005-3271 CVE-2005-3271 does not affect BellSoft software
Bulletin has no description...
Vulnerability in Helpdesk software Hesk 0.92
By The Name Of Allah Vulnerability in Helpdesk software Hesk .. Vulnerability Type : Login into The Administrator Menu With out Password Injected version : Helpdesk software Hesk 0.92 Vulnerability Example http://www.springporttwppd.com/helpdesk/ add : admin.php...
Microsoft ActiveSync multiple vulnerabilities
During synchronization with broadcast media LAN or Wi-Fi all data, including authentication is sent cleartext and it's possible to spoof client or server. It's possible to access device without password, DoS...
security flaw
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160...
nokia_mms_gateway_vuln.txt
Nokia Terminal Gateway TGW is a server application used to deliver multimedia messages to users with GSM handsets that do not support MMS. Nokia Terminal Gateway is used by about 90 GSM operators all over the world. When somebody sends you a multimedia message and it is not delivered to your...
phpMyFamily <= 1.4.0 Admin Bypass SQL Injection
Exploit for unknown platform in category web applications =============================================== phpMyFamily = 1.4.0 Admin Bypass SQL Injection =============================================== Tested with version 1.2.5 /str0ke Login as admin without pass: Login: "' OR 'a'='a' AND...
Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution
Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution source: https://www.securityfocus.com/bid/11826/info Microsoft Internet Explorer is reported prone to an arbitrary FTP server command-execution vulnerability. This issue is due to the application's failure to...
Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution
source: https://www.securityfocus.com/bid/11826/info Microsoft Internet Explorer is reported prone to an arbitrary FTP server command-execution vulnerability. This issue is due to the application's failure to properly sanitize user-supplied URI input before using it to execute FTP commands on...
GLSA-200403-08 : oftpd DoS vulnerability
The remote host is affected by the vulnerability described in GLSA-200403-08 oftpd DoS vulnerability Issuing a port command with a number higher than 255 causes the server to crash. The port command may be issued before any authentication takes place, meaning the attacker does not need to know a...
MusicDaemon 0.0.3 - Remote Denial of Service etcshadow Stealer (2)
MusicDaemon 0.0.3 - Remote Denial of Service etcshadow Stealer 2 / MusicDaemon Hello ...... bin::9797:0::::: ftp::9797:0::::: sshd::9797:0::::: ...... root@vortex:/test Server Side View: root@vortex:/test/musicdaemon-0.0.3/src ./musicd -c ../musicd.conf -p 1234 Using configuration: ../musicd.conf...
Sun Java System ASP < 4.0.3 Multiple Vulnerabilities
Binary data 4533.prm...
ApacheSSL protection bypass
In basic authentication emulation mode it's possible to access server without certificate...
CVE-2000-0087
Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...
