[SECURITY] [DSA 1370-2] New phpmyadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1370-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 10th, 2007 http://www.debian.org/security/faq -...

PUPET-SisfoKampus2006.txt

original File name : PUPET-SisfoKampus2006.txt date releases : September 10, 2007 Information : ========================= Advisory Name: Sisfo Kampus 2006 Local File Downloaded Vulnerability Author: k-one A.K.A PUPET Website vendor : http://sisfokampus.net/ Problem : All Local File can downloaded...

Sisfo Kampus 2006 - 'dwoprn.php?f' Arbitrary File Download

original File name : PUPET-SisfoKampus2006.txt date releases : September 10, 2007 Information : ========================= Advisory Name: Sisfo Kampus 2006 Local File Downloaded Vulnerability Author: k-one A.K.A PUPET Website vendor : http://sisfokampus.net/ Problem : All Local File can downloaded...

Sisfo Kampus 2006 (dwoprn.php f) Remote File Download Vulnerability

Exploit for unknown platform in category web applications =================================================================== Sisfo Kampus 2006 dwoprn.php f Remote File Download Vulnerability =================================================================== original File name :...

Sisfo Kampus 2006 - dwoprn.php?f Arbitrary File Download

Sisfo Kampus 2006 - dwoprn.php?f Arbitrary File Download original File name : PUPET-SisfoKampus2006.txt date releases : September 10, 2007 Information : ========================= Advisory Name: Sisfo Kampus 2006 Local File Downloaded Vulnerability Author: k-one A.K.A PUPET Website vendor :...

FileCopa FTP Server Pre 18 Jul Version

This module exploits the buffer overflow found in the LIST command in fileCOPA FTP server pre 18 Jul 2006 version discovered by www.appsec.ch This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

This module exploits a stack buffer overflow in AT-TFTP v1.9, by sending a request get/write for an overly long file name. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Allied Telesyn TFTP...

Sisfo Kampus 2006 (blanko.preview.php) Local File Disclosure Vuln

No description provided by source. QTRinux | Sisfo Kampus 2006 blanko.preview.php Local File Inclusion Vulnerability | Discovered by QTRinux| www.root-qtr.com| Qatar Security t34m | Vendor: http://www.sisfokampus.net/ | DorK : Powered by Sisfo Kampus 2006 | Exploit:...

Sisfo Kampus 2006 - blanko.preview.php Local File Disclosure

Sisfo Kampus 2006 - blanko.preview.php Local File Disclosure QTRinux | Sisfo Kampus 2006 blanko.preview.php Local File Inclusion Vulnerability | Discovered by QTRinux| www.root-qtr.com| Qatar Security t34m | Vendor: http://www.sisfokampus.net/ | DorK : Powered by Sisfo Kampus 2006 | Exploit:...

Sisfo Kampus 2006 (blanko.preview.php) Local File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================= Sisfo Kampus 2006 blanko.preview.php Local File Disclosure Vuln ================================================================= QTRinux | Sisfo Kampus 2006...

Sisfo Kampus 2006 - 'blanko.preview.php' Local File Disclosure

QTRinux | Sisfo Kampus 2006 blanko.preview.php Local File Inclusion Vulnerability | Discovered by QTRinux| www.root-qtr.com| Qatar Security t34m | Vendor: http://www.sisfokampus.net/ | DorK : Powered by Sisfo Kampus 2006 | Exploit: http://h0sT/dir/blanko.preview.php?nmf=/etc/passwd | Greetings:...

VUPlayer malformed playlist buffer overflow

Overview VUPlayer fails to properly handle malformed playlists. This vulnerability may allow a remote attacker to execute arbitrary code. Description VUPlayer is a freeware audio player for the Microsoft Windows platform. It can play various types of media files, such as MP3s. A Playlist .PLS or...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the 1 homepage, 2 mail, and 3 name parameters in a show action to a form.php; the 4 language and 5 anzeigebreite parameters to b admin/header.php; and the 6...

Moderate: kernel security and bugfix update

2.6.9-55.0.6.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

RHEL 3 : cyrus-sasl (RHSA-2007:0878)

Updated cyrus-sasl packages that correct a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the Cyrus implementation of SASL. SASL is the Simple...

CentOS 3 : cyrus-sasl (CESA-2007:0878)

Updated cyrus-sasl packages that correct a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the Cyrus implementation of SASL. SASL is the Simple...

Remote file inclusion

PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War VWar 1.5.0 R15 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1503, CVE-2006-1636, and CVE-2006-1747...

Code injection

SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a differen...

Remote file inclusion

PHP remote file inclusion vulnerability in convert/mvcwconver.php in the Virtual War VWar module for PHPNuke-Clan PNC 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this...

CVE-2007-4605

CVE-2007-4605 is a PHP remote file inclusion in Virtual War (VWar) prior to or including 1.5.0 R15. The vulnerability is triggered in convert/mvcw.php via the vwar_root parameter, allowing arbitrary PHP code execution. Related connected docs corroborate VWar RFI patterns affecting multiple script...