Moderate: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable Netwo...

Immunity Canvas: TOWEL_INCLUDE

Name| towelinclude ---|--- CVE| CVE-2007-5628 Exploit Pack| CANVAS Description| ToweLS remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: ToweLS CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5628 CVE Name: CVE-2007-5628...

CVE-2007-5623

Buffer overflow in the checksnmp function in Nagios Plugins nagios-plugins 1.4.10 allows remote attackers to cause a denial of service crash via crafted snmpget replies...

CVE-2007-5625

CVE-2007-5625 describes a reflected cross-site scripting (XSS) vulnerability in the filename.asp component of ASP Site Search SearchSimon Lite 1.0. Exploitation occurs via the QUERY parameter, allowing remote attackers to inject arbitrary web script or HTML. The linked sources confirm the vulnera...

CVE-2007-5629

CVE-2007-5629 describes a cross-site scripting (XSS) vulnerability in ShoppingTree CandyPress Store 4.1, specifically in admin/logon.asp, where an attacker can inject arbitrary script/HTML via the msg parameter. The entry notes this as a different vector than CVE-2007-2804. The connected document...

CVE-2007-5624

CVE-2007-5624 concerns a cross-site scripting flaw in Nagios2 (Nagios 2.x) via multiple CGI parameters. The vulnerability arises from missing input sanitising in several CGI scripts, enabling an attacker to inject arbitrary HTML/script via remote vectors. Public documentation (including Debian DS...

CVE-2007-5626

CVE-2007-5626 affects Bacula (noted as make_catalog_backup in 2.2.5 and likely earlier). The vulnerability arises because the MySQL password is passed on the command line and can be exposed by listing running processes or via cleartext emails when the script fails. Connected advisories confirm an...

CVE-2007-5627

The set of connected documents confirms CVE-2007-5627 affects SocketMail 2.2.8. The vulnerability is a PHP remote file inclusion in content/fnc-readmail3.php, exploitable via a URL in the __SOCKETMAIL_ROOT parameter, allowing an attacker to execute arbitrary PHP code. This is the stated impact in...

CVE-2007-5628

The CVE-2007-5628 issue affects The Online Web Library Site (TOWels) 0.1, where a PHP remote file inclusion is possible via the pageHeaderFile parameter in src/scripture.php, allowing remote code execution. The underlying cause is a vulnerable inclusion of a URL-specified file without proper vali...

CVE-2007-5623

CVE-2007-5623 is connected to Nagios Plugins (nagios-plugins) via a buffer overflow in check_snmp that permits a remote crash through crafted snmpget replies, with CVE-2007-5198 also appearing in related entries for check_http. The OpenVAS/NASL records consistently reference nagios-plugins and id...

php malformed cookie handling

Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285...

CVE-2007-4574

Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors...

CVE-2007-3850

The CVE-2007-3850 issue affects the Linux kernel 2.6 series running on PowerPC, where the eHCA driver fails to map userspace resources correctly. This allows local users to read portions of physical address space, revealing potentially sensitive information. The description explicitly ties this t...

CVE-2007-4574

CVE-2007-4574 affects the Red Hat Enterprise Linux 5 kernel on AMD64/Intel 64, stemming from a flaw in the backported stack unwinder fixes that could allow a local user to cause a denial of service. Public sources (RHSA-2007-0940 and CESA-2007-0940) describe kernel updates for RHEL5/CentOS to mit...

[Full-disclosure] ifnet.it WEBIF XSS Vulnerability

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: IFNET.IT WEBIF XSS VULNERABILITY || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME Author: SkyOut Date:...

oracle10g-sql.txt

// / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr" Polyakov / / email: [email protected]...

webif-xss.txt

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: IFNET.IT WEBIF XSS VULNERABILITY || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME Author: SkyOut Date:...

Mozilla Foundation Security Advisory 2007-29

Mozilla Foundation Security Advisory 2007-29 Title: Crashes with evidence of memory corruption rv:1.8.1.8 Impact: Critical Announced: October 18, 2007 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.8 Thunderbird 2.0.0.8 SeaMonkey 1.1.5...

Mozilla Foundation Security Advisory 2007-31

Mozilla Foundation Security Advisory 2007-31 Title: Digest authentication request splitting Impact: Moderate Announced: October 18, 2007 Reporter: Stefano Di Paola Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description Security researcher Stefano Di Paola reported that...

Mozilla Foundation Security Advisory 2007-32

Mozilla Foundation Security Advisory 2007-32 Title: File input focus stealing vulnerability Impact: Moderate Announced: October 18, 2007 Reporter: hong, Charles McAuley Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description A user on the Sla.ckers.org forums named hong...