Simple PHP Blog File Upload and User Credentials Exposure Vulnerabilities

=============================================================================== XOR Crew :: Security Advisory 8/25/2005 =============================================================================== Simple PHP Blog File Upload and User Credentials Exposure Vulnerabilities...

Append file in Oracle Webcache 9i

Name Append file vulnerability in Oracle Webcache 9i Systems Affected Oracle Application Server with Webcache 9i Severity Medium Risk Category Corruption of files Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 26 Apr 2005 V 1.00 Advisory...

gnomevfs -- unsafe URI handling

Alexander Larsson reports that some versions of gnome-vfs and MidnightCommander contain a number of extfs' scripts that do not properly validate user input. If an attacker can cause her victim to process a specially-crafted URI, arbitrary commands can be executed with the privileges of the victim...

CUPS DoS Bugs

A Debian user thanks, Alexander Hvostov! reported a DoS bug in Debian's CUPS packages cupsys. After working with the vendor on the issue, they subsequently discovered a few more. The original bug, at least, is remotely exploitable. The beta versions of CUPS 1.1 are not vulnurable, at least since...