CVE-2011-1471

Integer signedness error in zipstream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive file that triggers errors in zipfread function calls...

CVE-2011-0421

The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service NULL pointer dereference via an empty ZIP archive that is processed with a...

ZDI-11-094: (0 day) Hewlett-Packard StorageWorks File Migration Agent Remote Archive Tampering Vulnerability

ZDI-11-094: 0 day Hewlett-Packard StorageWorks File Migration Agent Remote Archive Tampering Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-094 February 28, 2011 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard...

PhotoPost PHP <= 4.8c Multiple XSS Vulnerabilities - Active Check

PhotoPost PHP is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

(0 day) Hewlett-Packard StorageWorks File Migration Agent Remote Archive Tampering Vulnerability

This vulnerability allows remote attackers to compromise the archive records on vulnerable installations of HP StorageWorks File Migration Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HsmCfgSvc.exe service responsible for managing archiv...

Anonleaks - HBGary Email Viewer Portal ,71,800 Emails Exposed !

Anonleaks - HBGary Email Viewer Portal,71,800 Emails Exposed ! Inboxes new [email protected] - Greg Hoglund - 27,606 emails torrent [email protected] - Aaron Barr - 16,906 emails torrent [email protected] - Ted Vera - 12,134 emails torrent [email protected] - Phil Wallisch - 15,156 emails torrent...

RHEL 6 : php (RHSA-2011:0195)

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

php: NULL pointer dereference in ZipArchive::getArchiveComment

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

OemPro 3.6.4 SQL Injection / Shell Upload

Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...

OemPro 3.6.4 - Multiple Vulnerabilities

Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...

OemPro 3.6.4 - Multiple Vulnerabilities

OemPro 3.6.4 - Multiple Vulnerabilities Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...

Kaspersky's security suite source code leaked, available for download !!

As a result of leakage of public access were sources of products from Kaspersky Lab. And the company and to read the archive of the experts claim that it contained "a fragment of an older version of the antivirus engine, which had previously been circulated in closed hacking resources. A free fil...

OpenOffice.org: directory traversal flaws in handling of XSLT jar filter descriptions and OXT extension files

Multiple directory traversal vulnerabilities in OpenOffice.org OOo 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .. dot dot in an entry in 1 an XSLT JAR filter description file, 2 an Extension aka OXT file, or unspecified other 3 JAR or 4 ZIP files...

OpenOffice.org: directory traversal flaws in handling of XSLT jar filter descriptions and OXT extension files

Multiple directory traversal vulnerabilities in OpenOffice.org OOo 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .. dot dot in an entry in 1 an XSLT JAR filter description file, 2 an Extension aka OXT file, or unspecified other 3 JAR or 4 ZIP files...

WordPress WP Publication Archive 2.0.1 Local File Inclusion

------------------------------------------------------------------------ Software................WordPress WP Publication Archive 2.0.1 Vulnerability...........Local File Inclusion Download................http://code.google.com/p/wp-publications-archive/ Release Date............1/24/2011 Tested...

FreeBSD Ports: php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WordPress Plugin WP Publication Archive 2.0.1 - file Information Disclosure

WordPress Plugin WP Publication Archive 2.0.1 - file Information Disclosure source: https://www.securityfocus.com/bid/46000/info The WP Publication Archive Plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An...

WordPress Publication Archive Plugin 2.0.1 - Information Disclosure Vulnerability

WP Publication Archive plugin's "file" parameter is prone to an information-disclosure vulnerability. Application fails to validate user-supplied data. Because of this issue, an attacker can download arbitrary files from the affected application. In that way, the attacker obtains sensitive...

WordPress Plugin WP Publication Archive 2.0.1 - 'file' Information Disclosure

source: https://www.securityfocus.com/bid/46000/info The WP Publication Archive Plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download arbitrary files from the affected...

Ubuntu Update for php5 vulnerabilities USN-1042-1

Ubuntu Update for Linux kernel vulnerabilities USN-1042-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10421.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for php5 vulnerabilities USN-1042-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...