Fuzzer that can be used for checking MSN passwords.
521db0a578c99849bb4ff77e2e8ff2bc390250a62b23e6d3745e1d4c6438a370When the Nortel Contivity VPN Client client is running as a service, it is possible to manipulate the interface of the client and escalate privileges to that of the LocalSystem account. Version 05_01.030 is affected.
375720faf531efb224a26293c8093be95398b85ba2b516ad88bb2fcfe96567dcHP Security Bulletin - A potential vulnerability has been identified with the HP ProLiant DL585 server, where a remote unauthorized user may gain access to the server controls, when the server is powered down.
8dc17f3a9dbc9f962a061b7688a976639a47aa9ae177efcf7ddb798c5736b210HP Security Bulletin - Several potential security vulnerabilities have been reported on HP Tru64 UNIX systems using an IPsec tunnel mode configuration which uses ESP without authentication. When running this configuration a remote attacker could force an error such that a portion of a plain-text message can be intercepted by the attacker.
69a421000ed84bc1d548878feb213d0777a15fb3d938993d459bd4c828b6d7a1The Linksys WLAN Monitor service (WLSVC) that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the administrative interface of the Linksys WLAN Monitor and escalate privileges to that of the LocalSystem account. Linksys WLAN Monitor version 2.0 is susceptible.
5d90e99cc7d09ce144cac0cd72259307db621dccdafb8d814216fa1cbd271982Versions of FreznoShop below 1.4.1 are vulnerable to SQL injection attacks due to a lack of input validation on parameters used in database queries. Sample exploitation provided.
bb41250b3bed688b2353f87c21a762846fbdd3c0632679bc8735b511054a6defSunbelt Software recently reported to the FBI evidence that shows CoolWebSearch is in a massive spyware ring where private information such as user names, passwords, chat sessions, bank information are stored and uploaded to servers. The FBI responded and are working on the case.
f03d823021f28c274ecbd24985fe1a9108a7e224f3e6b8da52fb5e3063611c6aNSFOCUS Security Advisory - NSFocus Security Team discovered a security vulnerability in Microsoft Internet Explorer. By crafting a malicious HTML page and alluring users to visit it, a remote attacker can execute arbitrary code with the privilege of the user. Internet Explorer does not properly call interface arguments when instantiating COM component in devenum.dll, resulting in exceptional memory access which might cause IE to crash. Carefully crafted HTML page might allow a remote attacker to execute arbitrary code. Affected are Microsoft Internet Explorer 5.01 SP4, 5.5 SP2, 6, and 6 SP1.
0131b5e2ab757713b9e722795d1a5527462cf0b4dfd3cfd0d6be0d279fc1ca30KDE Security Advisory: kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a vulnerability that causes it to write a file in $TMPDIR with almost infinite size, which can severly impact system performance. Systems affected are KDE 3.3.1 up to and including KDE 3.4.1.
2be88a931bccf813356cdff44b2770b38780fa147899f88ce3aa27638c7b3866Ezupload suffers from remote file inclusion vulnerabilities.
cc6a1084416c5380adcefb79cf41bc48381e547e7a5644b7c2248daba7f8e1c1Secunia Security Advisory - A vulnerability has been reported in EQdkp, which potentially can be exploited by malicious people to bypass certain security restrictions.
965ff3355aa31d265ff572b596e09dd62b224ebe0030ea20775ba647d1c894f0Secunia Security Advisory - A vulnerability has been reported in KDE, which can be exploited by malicious people to cause a DoS (Denial of Service) on a user's system.
bec8b2eafbc9d8d22e373fd43e001bbc4e9d156d504ff2fe4e2b9ecfe4b1ba9aSecunia Security Advisory - IHS has discovered a security issue in cPanel, which may allow malicious users to gain escalated privileges.
aa614b78688d06b263eb60c6f3496a3ced20405a55d57ba07639d9243347329dSecunia Security Advisory - A vulnerability has been reported in Lasso, which can be exploited by malicious people to bypass certain security restrictions.
3ee7f2699c083935d856b96aca0801603422967636fa4ea7900435e7fcb23b62Secunia Security Advisory - A vulnerability has been reported in Xpdf, which can be exploited by malicious people to cause a DoS (Denial of Service) on a vulnerable system.
cd1f502558526047e8a5cbe6a0220c90c96e57228900cf4759fae08a5be93b54Secunia Security Advisory - Heintz has discovered two vulnerabilities in XMB Forum, which can be exploited by malicious users to overwrite certain server set variables or conduct SQL injection attacks.
74f4596488eb46a535cf6636d20cd989b0aeb076a627d74089919e4d39b79e4cSecunia Security Advisory - A vulnerability and a weakness have been reported in Gaim, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a user's system.
92993b5b3952c3fb0847dcf3ac1b224e55ffc15dac25ba10a9473c639e1600b5Secunia Security Advisory - A vulnerability has been reported in CUPS, which can be exploited by malicious people to cause a DoS (Denial of Service) on a vulnerable system.
562c0e08e187c53ea7c02eef1e8dab37d7dc4323244a2b708d2a875b6f113692Secunia Security Advisory - Red Hat has issued an update for gaim. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
b75a36b1239ec0a063fec1c61e3cf784e3beb1a8842462704791cc63a5feceaeSecunia Security Advisory - kartoffelguru has discovered a vulnerability in WordPress, which can be exploited by malicious people to compromise a vulnerable system.
b8254d9f627847d7330b86a07b1c50f505bb4cdb96632bf4c09eb7020cb481d2Secunia Security Advisory - A vulnerability has been reported in PHlyMail, which can be exploited by malicious people to bypass certain security restrictions.
17a32eb6edcc4a145602fd1c92adf05b31195d45ecc66dc29c03a3f933bae709
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed