YaBBSM 3.0.0 (Offline.php) Remote File Include Vulnerability

No description provided by source. DESCRIPTION Remote file include vuln found by sZ oct 09, 2006 SOFTWARE Supermod 3.0 for yabb VENDOR URL http://www.supermod.org DORK YaBBSM V2.5.0 // Powered by YaBBSM V2.5.0 Based on YABB SE NOTES greetz to: neo-vortex, sk0tie, icez, Solano College CIS students...

horde3113010.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0011 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ Horde 3.1.1, 3.0.10 Multiple Security Issues +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON July 05, 2006 PUBLISHED AT...

CVE-2006-1393

Multiple cross-site scripting XSS vulnerabilities in the modpubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack...

NSAG-197-23.02.2006.txt

Advisory: NSAG-¹197-23.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: CubeCart 3.0.0 – 3.0.6 Site of manufacturer: http://www.cubecart.com The status: 19/11/2005 - Publication is postponed...

NSA Group Security Advisory NSAG-№197-23.02.2006 Vulnerability CubeCart 3.0.0 – 3.0.6

Advisory: NSAG-№197-23.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: CubeCart 3.0.0 – 3.0.6 Site of manufacturer: http://www.cubecart.com The status: 19/11/2005 - Publication is postponed...

CVE-2006-0575

convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink attack on the temporary file that is used during conversion...

Design/Logic Flaw

convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink attack on the temporary file that is used during conversion...

CVE-2006-0539

CVE-2006-0539 affects the convert-fcrontab component of the fcron 3.0.0 package. The vulnerability arises when a long command-line argument allows a local user to gain privileges, potentially because Linux glibc heap memory corruption can occur due to a strcpy in the strdup2 function overwriting ...

Microsoft Internet Explorer WMF Image Parsing Memory Corruption Vulnerability

Description Microsoft Internet Explorer is affected by an WMF image-parsing memory-corruption vulnerability. This issue is allegedly due to an integer-overflow flaw that leads to corrupted heap memory. This problem presents itself when a user views a malicious WMF-formatted file containing...

vBulletin Init.PHP unspecified vulnerability

The remote host is running vBulletin, a web based bulletin board system written in PHP. The remote version of this software is vulnerable to an unspecified issue. It is reported that versions 3.0.0 through to 3.0.4 are prone to a security flaw in 'includes/init.php'. Successful exploitation...

vBulletin < 3.0.5 'init.php' Unspecified Vulnerability

It is reported that versions 3.0.0 through to 3.0.4 of vBulletin are prone to a security flaw in SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2004-2076

The CVE-2004-2076 entry describes a cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.0.0 RC4 identified via search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the query parameter, enabling possible theft of cookies or sessio...

PT-2004-1772 · Samba +1 · Samba +1

Name of the Vulnerable Software and Affected Versions: Samba versions 2.2.x through 2.2.9 Samba versions 3.0.0 through 3.0.4 Description: A buffer overflow issue exists when the mangling method = hash option is enabled in smb.conf. The impact and attack vectors of this issue are not specified. Th...

vBulletin < 3.0.0 RC4 - Cross Site Scripting

vBulletin Cross Site Scripting Vendor: Jelsoft Enterprises Product: vBulletin Version: = 3.0.0 RC4 Website: http://www.vbulletin.com/ BID: 9887 9888 9889 9940 9943 Description: vBulletin is a powerful, scalable and fully customisable forums package for your web site. Based on the PHP language,...

VBulletin Preview Message - XSS Vuln

------------------------------------------------------ VBulletin Private Message "Preview Message" XSS Vulnerability ------------------------------------------------------ Any kind of XSS attacks possibility. ------------------------------------------------------ About VBulletin;...

URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Secure Shell Community, A potential remote root exploit has been discovered in SSH Secure Shell 3.0.0, for Unix only, concerning accounts with password fields consisting of two or fewer characters. Unauthorized users could potentially log in to...