IBM Domino Web Access Upload Module inotes6.dll BoF Exploit

No description provided by source. !-- written by e.b. IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit Bad chars: 0x80+ CVE-2007-4474 Tested on Windows XP SP2fully patched English, IE6, inotes6.dll version 6.0.40.0 and version 6.0.48.0...

Trolltech Qt QSslSocket类证书验证绕过安全限制漏洞

BUGTRAQ ID: 27112 CVECAN ID: CVE-2007-5965 Qt是一款C++应用开发工具，包括类库和跨平台开发工具。 Qt可能没有对SSL连接中的QSslSocket类证书执行验证，使用QSslSocket的应用可能受骗接受伪造的证书，这有助于攻击者执行网络钓鱼类的攻击。 Trolltech Qt 4.3.2 Trolltech Qt 4.3.1 Trolltech Qt 4.3.0 Trolltech --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1449-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability

iDefense Security Advisory 12.24.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 24, 2007 I. BACKGROUND Novell ZENworks Endpoint Security Management ESM Security Client provides centrally managed, policy based firewall protection for clients. It is designed to be installed on all...

Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities

CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...

Microsoft Expression Media Plaintext Password Storage Weakness

CVE-2007-5470 Microsoft Expression Media is prone to a weakness because passwords are stored in plain-text format. This issue stems from a design error in the catalog password-protection feature. Attackers could use this issue in conjunction with other vulnerabilities in a host to gain access to...

[SECURITY] [DSA 1448-1] New eggdrop packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error

------------------------------------------------------------------------ Debian Security Advisory DSA-1449-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

CVE-2007-6662

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...

CVE-2007-6660

2z project 0.9.6.1 allows remote attackers to obtain sensitive information via 1 a request to index.php with an invalid template or 2 a request to the default URI with certain year and month parameters, which reveals the path in various error messages...

CVE-2007-6652

CVE-2007-6652 affects XCMS 1.83 and earlier. The flaw lies in cpie.php which redirects without exiting, enabling direct static code injection via the testo_0 parameter in a cpie admin action to index.php and resulting in writes to dati/generali/footer.dtb (the XCMS footer). This can allow remote ...

CVE-2007-6658

CVE-2007-6658 concerns a SQL injection in the CustomCMS (CCMS) 3.1 Demo, specifically in the files/admin.php/vars.php. The underlying issue is an injection vulnerability exploitable via the p parameter on the Console page, enabling remote attackers to execute arbitrary SQL commands. The available...

CVE-2007-6648

CVE-2007-6648 describes a directory traversal vulnerability in the PHP index.php for SanyBee Gallery versions 0.1.0 and 0.1.1, where an attacker can use directory traversal sequences in the p parameter to include and execute arbitrary local files. The connected documents confirm the affected prod...

CVE-2007-6659

Multiple cross-site scripting XSS vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 contentshort or 2 contentfull parameter in an addnews action to the default URI; 3 the content parameter in a pm write action to 2z/admin.php; 4 the...

CVE-2007-6647

CVE-2007-6647 is a SQL injection vulnerability in the web app component w-Agora ≤ 4.2.1, exploitable via the cat parameter in index.php. The connected sources confirm the affected product and vulnerability class but do not provide a patch version or remediation steps within the available document...

CVE-2007-6650

The CVE-2007-6650 entry describes an Unrestricted file upload vulnerability in the Bitweaver R2 CMS, specifically in the fisheye/upload.php endpoint. An attacker can upload arbitrary files by abusing the image/gif content type (and possibly other image/PDF types), demonstrated by uploading a .hta...

CVE-2007-6653

The CVE-2007-6653 entry describes a Directory traversal vulnerability in Mihalism Multi Host 2.0.7, affecting the download.php script. The vulnerability allows remote attackers to read arbitrary files by manipulating the file parameter with a .. (dot dot) sequence. Documented impact is read acces...

CVE-2007-6655

The provided sources identify CVE-2007-6655 as a PHP remote file inclusion vulnerability in Kontakt Formular 1.4. The flaw affects the includes/function.php component, allowing an attacker to supply a URL via the root_path parameter to execute arbitrary PHP code on the server. The vulnerability i...

CVE-2007-6656

The CVE-2007-6656 entry describes an SQL injection in CMS Made Simple's TinyMCE module, specifically in content_css.php, affecting CMS Made Simple 1.2.2 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the templateid parameter. The provided sources conf...