CVE-2007-6296

PHP remote file inclusion vulnerability in userspopupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter...

Moderate: Red Hat Security Advisory: python security update

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An integer...

Critical: Red Hat Security Advisory: samba security and bug fix update

Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...

Unfixed XSS vulnerability at www4.airnet.ne.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www4.airnet.ne.jp, which at the time of submission ranked 19762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. ...

MySQL Community Server 5.0 < 5.0.51 RENAME TABLE Symlink System Table Overwrite

The version of MySQL Community Server installed on the remote host reportedly fails to check whether a file to which a symlink points exists when using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options. A local attacker may be able to leverage this issue to...

DSA-1428-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

Critical: samba security and bug fix update

3.0.9-1.3E.14.3 - Security fix for CVE-2007-6015 - Fix for regression introduced with CVE-2007-4572 - resolves: 407321 - resolves: 389021...

BadBlue 2.72b PassThru Buffer Overflow

This module exploits a stack buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier. Module Options msf use exploit/windows/http/badblue/passthru msf undefinedpassthru show actions ...actions... msf undefinedpassthru set ACTION msf undefinedpassthru show options...

Security fix for the ALT Linux 5 package samba version 3.0.28-alt1

Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...

[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1422 [email protected] http://www.debian.org/security/ Steve Kemp December 07, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.centromodaonline.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.centromodaonline.com, which at the time of submission ranked 190543 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. I...

Unfixed XSS vulnerability at bbs.security.ccidnet.com

Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting bbs.security.ccidnet.com, which at the time of submission ranked 4980 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.datavis.com

Security researcher tenest, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.datavis.com, which at the time of submission ranked 150039 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currentl...

Unfixed XSS vulnerability at www.pearldistrict.org

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.pearldistrict.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.eastdevoncats.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.eastdevoncats.com, which at the time of submission ranked 6004717 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It ...

Unfixed XSS vulnerability at www.dod.com

Security researcher tenest, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.dod.com, which at the time of submission ranked 559387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at www.jalecogames.co.jp

Security researcher kusomiso.com, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.jalecogames.co.jp, which at the time of submission ranked 569376 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It...

Unfixed XSS vulnerability at www.director.it

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.director.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at www.winchellswebworks.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.winchellswebworks.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.otoburada.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.otoburada.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is current...