CVE-2007-5806

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

CVE-2007-5807

CVE-2007-5807 involves a buffer overflow in the register function of the Ultra Star Reader ActiveX control used by SSReader. Remote code execution is possible via unspecified vectors, and the issue is described as being exploited in the wild. The affected component is the Ultra Star Reader Active...

CVE-2007-5810

Hitachi Web Server versions 01-00 to 03-00-01 (as used by Cosminexus) do not properly validate SSL client certificates, allowing remote attackers to spoof authentication with a forged certificate. The vulnerability is mitigated if SSL client authentication is disabled; no explicit patch/version i...

CVE-2007-5806

CVE-2007-5806 is an XSS vulnerability in ILIAS 3.8.3 and earlier affecting the file Services/Utilities/classes/class.ilUtil.php . The issue allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the mailing or forum components, demonstrated us...

CVE-2007-5812

CVE-2007-5812 affects Module Builder 1.0 within SugarCRM, where the PHP script modules/Builder/DownloadModule.php fails to validate the file parameter before using it to read and disclose file contents. This directory traversal vulnerability allows remote attackers to read arbitrary files on the ...

CVE-2007-5809

The CVE-2007-5809 entry describes a cross-site scripting (XSS) vulnerability in Hitachi Web Server versions 01-00 through 03-10 (as used by certain Cosminexus products). The issue arises when an attacker sends HTTP requests that trigger the server’s automatic creation of a server-status page, all...

CVE-2007-0011

The CVE-2007-0011 issue affects Citrix Access Gateway (also Citrix Advanced Access Control) prior to Advanced Edition 4.5 HF1. The vulnerability is that a session ID is placed in the URL during the web portal authentication flow, enabling context-dependent attackers to hijack a user session by re...

Immunity Canvas: CVE_2007_4513

Name| CVE20074513 ---|--- CVE| CVE-2007-4513 Exploit Pack| CANVAS Description| CVE-2007-4513: lquerypv Notes| CVE Name: CVE-2007-4513 VENDOR: IBM VersionsAffected: 5.X Repeatability: unlimited CVE URL: https://vulners.com/cve/CVE-2007-4513 CVSS: 7.2...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues for Red Hat Application Stack v1.2 are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilities an...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration...

Critical: Red Hat Security Advisory: pcre security update

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

Critical: Red Hat Security Advisory: pcre security update

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

CVE-2007-4513

Summary: CVE-2007-4513 affects IBM AIX 5.2/5.3. The vulnerable components are the AIX utilities lqueryvg (option -p) and lquerypv (option -V). The root cause is a stack-based buffer overflow caused by copying an overly long argument into a fixed-size buffer via sprintf. This enables local privile...

CVE-2007-4623

CVE-2007-4623 is a local stack-based buffer overflow in the bellmail utility on IBM AIX 5.2/5.3. The vulnerability exists in the bellmail/sendrmt function, where user input is concatenated with static strings using sprintf without proper bounds checking, allowing a local attacker to overflow the ...

CVE-2007-4621

CVE-2007-4621 describes a local privilege escalation in IBM AIX 5.2 via a buffer overflow in the crontab main function when copying user-supplied command line arguments into a fixed-size BSS buffer. Successful exploitation allows an attacker to execute arbitrary code with root privileges, requiri...

CVE-2007-4217

CVE-2007-4217 describes a stack-based buffer overflow in the domacro function of IBM AIX FTP client (AIX 5.2 and 5.3). The overflow is triggered by a long parameter to a macro executed via the '$' command, allowing a local attacker to gain privileges. The underlying cause is an unbounded strcpy i...

[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1398-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 05, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1398-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 05, 2007 http://www.debian.org/security/faq -...

SOL8077 - BIND 8 vulnerability CVE-2007-2930

The NSIDSHUFFLEONLY and NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches using unknown vectors...

sfshoutbox-inject.txt

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: SF-Shoutbox 1.2.1 = 1.4 HTML/JS Injection Vulnerability || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME...