CVE-2009-2915

The CVE-2009-2915 entry concerns the 2FLY Gift Delivery System 6.0. The vulnerability is an SQL injection in the 2fly_gift.php content action, exploitable via the gameid parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: 2FLY Gift Delivery System 6.0; vuln...

CVE-2009-2915

SQL injection vulnerability in 2flygift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a content action...

CVE-2009-2026

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

Stack overflow

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

CVE-2009-2026

CVE-2009-2026: Stack-based buffer overflow in the dtscore library (CA Data Transport Services) and related CA products (CA Software Delivery r11.2 C1–C3, SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; CA IT Client Manager r12). The vulnerability stems from insufficie...

CVE-2009-2026

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

CA20090806-01: Security Notice for Data Transport Services

CA20090806-01: Security Notice for Data Transport Services Issued: August 6, 2009 CA's technical support is alerting customers to a security risk with Data Transport Services. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued patches to address the...

ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability

ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-052 August 7, 2009 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates Unicenter Software Delivery -- TippingPointTM IPS Customer...

Generic Emailer (SMTP)

This module can be used to automate email delivery. This code is based on Joshua Abraham's email script for social engineering. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'yaml' class MetasploitModule...

Online crime complaints hit record high in 2008

The FBI’s Internet Crime Complaint Center IC3 says complaints of online crime hit a record high in 2008, driven mostly by non-delivery of goods and service and those pesky 419 Nigerian e-mail scams. Accordign to a new report PDF from ic3.gov, the center received a a total of 275,284 complaints, a...

imap security update

CentOS Errata and Security Advisory CESA-2009:0275 Updated imap packages to fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both...

Privilege escalation via PR_SET_PDEATHSIG

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal PRSETPDEATHSIG...

dmail / tmail MDA buffer overflow

Buffer overflow in mail delivery foder argument...

[SECURITY] Fedora 8 Update: rubygem-actionmailer-2.1.1-1.fc8

Makes it trivial to test and deliver emails sent from a single service laye r...

CVE-2008-3646

The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...

[OPENX-SA-2008-002] OpenX 2.4.9 and 2.6.2 fix SQL injection vulnerability

======================================================================== OpenX security advisory OPENX-SA-2008-002 ------------------------------------------------------------------------ Advisory ID: OPENX-SA-2008-002 Date: 2008-Oct-06 Security risk: Moderately critical Applications affetced:...

CVE-2008-4393

CVE-2008-4393 affects VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier. The vulnerability is an XSS in which an attacker can inject arbitrary script via the action parameter to zodiac/servlet/zodiac, enabling remote script execution in the victim’s browser. The issue stems from u...

verisign-xss.txt

VeriSign Kontiki Delivery Management System DMS Cross-Site Scripting Vulnerability CVE Number: CVE-2008-4393 Vulnerability Type / Importance: XSS / Medium Problem discovered: September 24th 2007 Vendor contacted: September 26th 2007 Advisory published: March 28th 2008 Abstract The Kontiki Deliver...

VeriSign Kontiki Delivery Management System 5.0 - action Cross-Site Scripting

VeriSign Kontiki Delivery Management System 5.0 - action Cross-Site Scripting source: https://www.securityfocus.com/bid/31580/info Kontiki Delivery Management System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

VeriSign Kontiki Delivery Management System 5.0 - 'action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31580/info Kontiki Delivery Management System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...