Design/Logic Flaw

A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...

CVE-2008-1146

CVE-2008-1146 affects OpenBSD 2.8–4.2 where a PRNG using XOR with 3-bit hops (Algorithm X3) enables remote attackers to infer DNS transaction IDs from prior outputs, potentially enabling DNS cache poisoning on OpenBSD’s BIND modification. Impact per NVD indicates partial confidentiality, partial ...

CVE-2008-1146: Undefined Security Weakness

A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...

Code injection

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3351

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3351

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3351

CVE-2007-3351 affects SJPhone SIP soft phone 1.60.303c running on Dell Axim X3 with Windows Mobile 2003. A direct crafted INVITE can cause the device to transmit many RTP packets, resulting in a denial of service (device hang). No remediation or exploit details are provided in the supplied docume...

Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit

No description provided by source. / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp evildoc.wpd Original...

CVE-2007-1735

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...

CVE-2007-1735

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...

CVE-2007-1735

Corel WordPerfect Office X3 (version 13.0.0.565) is affected by a stack-based buffer overflow in the handling of the printer selection (PRS) name within a WordPerfect document. The issue allows user-assisted remote attackers to execute arbitrary code due to improper bounds checking when parsing a...

CVE-2007-1735: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...

Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow

Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp...

Corel Wordperfect Office X3 Stack Overflow

Product Name: Wordperfect X3 13.0.0.565 Vendor: http://www.corel.com Date: 28 March, 2007 Author: Jonathan So jonny @ nop-art dot net Advisory URL: http://www.nop-art.net/advisories/wpwinX3.txt I. DESCRIPTION A stack overflow vulnerability has been found in Wordperfect X3. The vulnerability could...

Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================================== Corel Wordperfect X3 13.0.0.565 .PRS Local Buffer Overflow Exploit ==================================================================== / wp13exp.c - Wordperfect X3 remote...

Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow

/ wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp evildoc.wpd Original advisory:...

Sql injection

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1949

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1949

CVE-2006-1949 affects NicPlex PlexCart X3 and earlier. A SQL injection vulnerability exists in plexcart.pl, exploitable via the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry records impact as partial confidentiality/integrity/availability with network...

CVE-2006-1949: Undefined Security Weakness

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...