DSA-1696-1 icedove - several vulnerabilities

Bulletin has no description...

USN-701-1: Thunderbird vulnerabilities

Several flaws were discovered in the browser engine. If a user had Javascript enabled, these problems could allow an attacker to crash Thunderbird and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Thunderbird could be...

ReVou Twitter Clone File Upload

--------------------------------------------------------- Portal Name: ReVou Twitter Clone Arbitrary File Upload Vulnerability Version: All version Vendor : http://www.revou.com/ Demo: http://www.revou.com/demo/ Author : S.W.A.T. , [email protected] Vulnerability : wWw.BaTLaGH.CoM...

ReVou Twitter Clone Arbitrary File Upload Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: ReVou Twitter Clone Arbitrary File Upload Vulnerability Version: All version Vendor : http://www.revou.com/ Demo: http://www.revou.com/demo/ Author : S.W.A.T. , [email protected] Vulnerabili...

ReVou Twitter Clone Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================= ReVou Twitter Clone Arbitrary File Upload Vulnerability ======================================================= --------------------------------------------------------- Portal Name:...

ReVou Twitter Clone - Arbitrary File Upload

--------------------------------------------------------- Portal Name: ReVou Twitter Clone Arbitrary File Upload Vulnerability Version: All version Vendor : http://www.revou.com/ Demo: http://www.revou.com/demo/ Author : S.W.A.T. , [email protected] Vulnerability : wWw.BaTLaGH.CoM...

Mini File Host 1.x Arbitrary PHP File Upload Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability ...

Mini File Host 1.x Arbitrary PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Mini File Host 1.x Arbitrary PHP File Upload Vulnerability ========================================================== --------------------------------------------------------- Port...

Mini File Host 1.x - Arbitrary .PHP File Upload

Mini File Host 1.x - Arbitrary .PHP File Upload --------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected]...

Mini File Host 1.x - Arbitrary '.PHP' File Upload

--------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability : Uploader Bypass...

CVE-2008-3794

Integer signedness error in the mmsReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a...

MySQL Enterprise Server 5.0 < 5.0.60 MyISAM CREATE TABLE Privilege Check Bypass

The version of MySQL Enterprise Server 5.0 installed on the remote host is earlier than 5.0.60. Such versions reportedly allow a local user to circumvent privileges through creation of MyISAM tables using the 'DATA DIRECTORY' and 'INDEX DIRECTORY' options to overwrite existing table files in the...

CVE-2007-2640

LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtain sensitive information about private cards...

DEBIAN-CVE-2007-1436

Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unknown vectors that prevents a password check from occurring...

USN-308-1: shadow vulnerability

Ilja van Sprundel discovered that passwd, when called with the -f, -g, or -s option, did not check the result of the setuid call. On systems that configure PAM limits for the maximum number of user processes, a local attacker could exploit this to execute chfn, gpasswd, or chsh with root...

DEBIAN-CVE-2006-2920

Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character...

CVE-2006-2920

Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character...

CVE-2006-2920

Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character...

CVE-2005-3764

The image gallery imagegallery component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML...

CVE-2005-0493

CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter...