[SECURITY] [DSA 1062-1] New kphone packages fix information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 1062-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1052-1 [email protected] http://www.debian.org/security/ Martin Schulze May 8th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1050-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1047-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1952

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

Directory traversal

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

CVE-2006-1952

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1037-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1029-1] New libphp-adodb packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1029-1 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4769

CVE-2005-4769: Affected software is Belchior Foundry vCard PRO 3.1; vulnerability resides in addrbook.php where SQL injection via the addr_id parameter allows remote execution of arbitrary SQL commands. The core issue is improper input handling leading to database query manipulation. No explicit ...

Horde Help Viewer 3.1 - Remote Command Execution

!/usr/bin/perl Wed Apr 5 21:51:12 CEST 2006 [email protected] Horde help module remote execution telnet 310.27.901.33.1109 1689 thanks horatio for the address USER paranoia PASS total SYST REST 100 REST 0 PWD TYPE A PASV LIST CWD 0days GET horddy.pl w0w this damn 0day ftp is so sexy! GO GO GO !! ...

[SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1023-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1601

Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors...

CVE-2006-1601

CVE-2006-1601 affects SunPlex Manager within Sun Cluster 3.1 (4/04 build). Local users with solaris.cluster.gui authorization could view arbitrary files via unspecified vectors. Connected documents confirm affected product and vulnerability type, but do not specify a valid exploit, exploitability...

CVE-2006-1601

Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors...

XSS in eBoard alpha 3.1

Advisory: eBoard alpha 3.1 Home Page: http://www.edge-programming.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php http://koti.mbnet.fi/stinger/eboard/index.php?a=topic&forum=1&topic=10"scriptalert/script"...

[SECURITY] [DSA 998-1] New libextractor packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 998-1 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 986-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 985-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...

Sql injection

Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php date.php was originally reported, but this appears to be in error...