Fedora 10 : rt3-3.8.2-11.fc10 (2009-10426)

Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 - Add R: perlData::ICal, R: perlData::ICal::Entry::Event BZ 507965. - Fri Jun 19 2009...

Fedora 11 : rt3-3.8.2-11.fc11 (2009-10498)

Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 - Add R: perlData::ICal, R: perlData::ICal::Entry::Event BZ 507965. - Fri Jun 19 2009...

[SECURITY] Fedora 10 Update: libtiff-3.8.2-14.fc10

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2009-2285

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...

CVE-2009-2285

CVE-2009-2285 affects libtiff 3.8.2, where a buffer underflow in the LZWDecodeCompat function can allow a context-dependent attacker to cause a denial of service (crash) via a crafted TIFF image. The connected Nessus advisories reference this CVE in relation to libtiff versions around 3.8.x (e.g....

CVE-2009-2285

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...

Fedora 10 : rt3-3.8.2-8.fc10 (2009-6837)

Fri Jun 19 2009 Ralf Corsepius - 3.8.2-8 - Address BZ 506885 BZ 506236. - Remove rt-3.4.1-I18N.diff. - Fri Apr 24 2009 Ralf Corsepius - 3.8.2-7 - README.fedora.in: Add --dba root to rt-setup-database BZ 488621. - R: perlXML::RSS BZ 496720. - Wed Feb 18 2009 Ralf Corsepius - 3.8.2-5 - Add R:...

Fedora 11 : rt3-3.8.2-8.fc11 (2009-6899)

Fri Jun 19 2009 Ralf Corsepius - 3.8.2-8 - Address BZ 506885 BZ 506236. - Remove rt-3.4.1-I18N.diff. - Fri Apr 24 2009 Ralf Corsepius - 3.8.2-7 - README.fedora.in: Add --dba root to rt-setup-database BZ 488621. - R: perlXML::RSS BZ 496720. Note that Tenable Network Security has extracted the...

LibTIFF 3.8.2 - LZWDecodeCompat() Remote Buffer Underflow

LibTIFF 3.8.2 - LZWDecodeCompat Remote Buffer Underflow source: https://www.securityfocus.com/bid/35451/info LibTIFF is prone to a remote buffer-underflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute...

vBulletin 3.8.2 Cross Site Scripting

vBulletin 3.8.2 adminCP Cross-Site Scripting R.I.P DrtRp - We miss you --------------------------------------------- Original Post at http://forum.aria-security.com/en/showthread.php?p=1179 Greetz to Aura & all Aria-Security Mods & Members These were all tested on vbulletin 3.8.0 RC2 so other...

LibTIFF 'tif_lzw.c'远程整数下溢漏洞

BUGTRAQ ID:30832 CVE ID：CVE-2008-2327 CNCVE ID：CNCVE-20082327 LibTiff是一款负责对TIFF图象格式进行编码/解码的应用库。 LibTIFF 'tiflzw.c'存在整数下溢问题，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 libtiff/tiflzw.c代码中的"LZWDecode"和"LZWDecodeCompat"函数存在错误，通过构建特殊的TIFF文件，诱使用户访问，可触发缓冲区下溢，导致以链接此库的应用程序权限执行任意指令。 LibTIFF LibTIFF 3.8.2 + Debian Linu...

CVE-2008-2349

Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1...

zomplog-admin.txt

======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm password" -------------------------------------------------------------...

Zomplog <= 3.8.2 (force_download.php) File Disclosure Vulnerability

No description provided by source. Name: "Zomplog 3.8.2 = file disclouse" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: Stack-Terrorist Exploit: http://localhost/path/upload/forcedownload.php?file=forcedownload.php thnx : alah...

Zomplog <= 3.8.2 (force_download.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== Zomplog = 3.8.2 forcedownload.php File Disclosure Vulnerability =================================================================== Name: "Zomplog 3.8.2 = file disclouse"...

Zomplog 3.8.2 - newuser.php Arbitrary Add Admin

Zomplog 3.8.2 - newuser.php Arbitrary Add Admin ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль...

Zomplog 3.8.2 - force_download.php File Disclosure

Zomplog 3.8.2 - forcedownload.php File Disclosure Name: "Zomplog 3.8.2 = file disclouse" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: Stack-Terrorist Exploit: http://localhost/path/upload/forcedownload.php?file=forcedownload.php thnx : alah...

CVE-2008-2176

Cross-site scripting XSS vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter...

Vulnerability in Multiple Web Application

I found a link about some web applications vulnerability. 1. Chicomos CMS Configuration File Disclosoure 2. Zomplog 3.8.2 Blog Engine Arbitrary Files Download/Disclosoure 3. Wheatlog Blog Engine Auto Create User See below http://kandangjamur.net/tutorial/multiple-application.txt...

Zomplog 3.8.2 XSS Vulnerability

---------------------------------------------------------------- Script : Zomplog 3.8.2 Type : XSS Vulnerability ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...