[SA18301] rxvt-unicode TTY Device Insecure Permissions Vulnerability

TITLE: rxvt-unicode TTY Device Insecure Permissions Vulnerability SECUNIA ADVISORY ID: SA18301 VERIFY ADVISORY: http://secunia.com/advisories/18301/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: rxvt-unicode 5.x http://secunia.com/product/4777/ rxvt-unicode 6.x...

Extreme Search Corporate Edition 6.x XSS vuln.

Extreme Search Corporate Edition 6.x XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/extreme-search-corporate-edition-6x.html Vendor:http://www.extremecorporate.com/index-new.html affected version:6.0 and prior Product Description: Power...

[SA16235] Hosting Controller comgetfile.asp Information Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2184

eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file...

CVE-2005-2184

Technical details about CVE-2005-2184 are not publicly provided in the connected documents. The available descriptions note that eRoom 6.x allows arbitrary commands via a .lnk attachment, but no specific impact, affected versions, or fixes are disclosed here. Monitor for updates.

CVE-2005-2184

eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file...

[SA15854] Plans "evt_id" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1869

PHP remote file inclusion vulnerability in startlobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIGMWCHATLibs parameter...

CVE-2005-1869

PHP remote file inclusion vulnerability in startlobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIGMWCHATLibs parameter...

CVE-2005-1869

MWChat 6.x contains a PHP remote code execution via start_lobby.php through the CONFIG[MWCHAT Libs] parameter. The vulnerability affects the start_lobby.php file and can lead to arbitrary PHP execution by an attacker. The PT-2005-2826 advisory notes restricting access to start_lobby.php and avoid...

CVE-2004-2018

Php-Nuke 6.x–7.3 is affected by a PHP remote file inclusion vulnerability in index.php, exploitable by altering the modpath parameter to reference a URL on a remote server containing malicious code, enabling remote code execution. The initial documents do not provide specific remediation steps or...

CVE-2005-1060

Technical details about CVE-2005-1060 are not publicly available in the provided documents. Monitor for updates.

[SA14923] DeluxeFTP Disclosure of User Credentials

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: DeluxeFTP Disclosure of User Credentials SECUNIA...

CVE-2005-1028

PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to 1 index.php with the forumadmin parameter set, 2 the Surveys module, or 3 the YourAccount module, which reveals the path in a PHP error message...

[waraxe-2005-SA#041] - Critical Sql Injection in PhpNuke 6.x-7.6 Top module

================================================================================ waraxe-2005-SA041 ================================================================================ Critical Sql Injection in PhpNuke 6.x-7.6 Top module...

[SA14611] Novell Netware Xsession Security Bypass

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Novell Netware Xsession Security Bypass SECUNIA ADVISO...

PHP-Nuke 6.x/7.x - Public Message SQL Injection

source: https://www.securityfocus.com/bid/9615/info It has been reported that the 'public message' feature of PHP-Nuke is vulnerable to an SQL injection vulnerability. The issue is due to improper sanitization of user-defined parameters supplied to the module. As a result, an attacker could modif...

NOVL-2003-2966181 - HTTPSTK DOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2003-2966181 Title: HTTPSTK DOS Date: 03-Jun-2003 Revision: Original Product Name: Netware OS/Platforms: Netware 6.x Reference URL:...

Microsoft Internet Explorer - Object Tag (MS03-020)

Microsoft Internet Explorer - Object Tag MS03-020 !/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url:// the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near...

CVE-2000-1193

Performance Metrics Collector Daemon PMCD in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service resource exhaustion via an extremely long string to the PMCD port...