Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities

Joomla/Mambo CMS Component SimpleBoard 1.1.0 Stable XSS-Vulnerabilities ======================================================================= Release Date ------------ June 01, 2006 Vendor ------- Two Shoes Mambo Factory http://www.tsmf.net/ Version ------- SimpleBoard 1.1.0 Stable comsimpleboa...

BASE <= 1.2.4 melissa (Snort Frontend) Remote Inclusion Vulnerabilities

No description provided by source. Basic Analysis and Security Engine BASE = 1.2.4 melissa Inclusion Vulnerabilities Just glanced over BASE for a pentesting job. /str0ke ! milw0rm.com code baseqrycommon.php includeonce"$BASEpath/includes/basesignature.inc.php"; /code...

BASE <= 1.2.4 melissa (Snort Frontend) Remote Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= BASE = 1.2.4 melissa Snort Frontend Remote Inclusion Vulnerabilities ======================================================================= Basic Analysis and Securit...

BASE 1.2.4 - melissa Snort Frontend Remote File Inclusion

Basic Analysis and Security Engine BASE = 1.2.4 melissa Inclusion Vulnerabilities Just glanced over BASE for a pentesting job. /str0ke ! milw0rm.com code baseqrycommon.php includeonce"$BASEpath/includes/basesignature.inc.php"; /code...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:040)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The udpv6getport function in udp.c, when running IPv6, allows local users to cause a Denial of Service infinite loop and crash CVE-2005-2973. The mqopen system call in certain situations can decrement a counter...

Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-244-1)

Doug Chapman discovered a flaw in the reference counting in the sysmqopen function. By calling this function in a special way, a local attacker could exploit this to cause a kernel crash. CVE-2005-3356 Karl Janmar discovered that the /proc file system module used signed data types in a wrong way....

GLSA-200510-08 : xine-lib: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-08 xine-lib: Format string vulnerability Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. Impact : An attacker could submit malicious information about an audio CD to a...

[SECURITY] [DSA 806-1] New cvs packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 806-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2606

Technical details about CVE-2005-2606 are not publicly available in the provided documents. No concrete affected products, root causes, or remediation are specified here. Monitor for updates.

CVE-2005-2606

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors...

CVE-2005-2029

The CVE-2005-2029 entry concerns amaroK Web Frontend 1.3. It describes that the globals.inc file is stored under the web root without a .php extension and with insufficient access control, enabling remote attackers to retrieve the database username and password via a direct request to the file. T...

CVE-2005-2029

amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file...

CVE-2005-2029

amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file...

GLSA-200504-27 : xine-lib: Two heap overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-27 xine-lib: Two heap overflow vulnerabilities Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact : By setting up a malicious server and enticing a...

SQL Injection in CACTI

///////////////////////////////////////////////////// //// Vulnerable Program: CACTI //// //// Version : The latest version 0.8.5a //// //// Url: http://www.raxnet.net //// //// The Bug: SQL injection to allows bypass the auth. //// //// Date: Today, August 16 off 2004 //// //// Author: Fernando...

Security fix for the ALT Linux 9 package wireshark version 0.9.16-alt1

Nov. 6, 2003 Alexander Bokovoy 0.9.16-alt1 - 0.9.16 - Fixed: + CAN-2003-0925 + CAN-2003-0926 + CAN-2003-0927 - Added: + --enable Master switch allows to build this package for ALT Linux Master 2.2 + Build GTK+ 2.x frontend instead of GTK+ 1.x - Updated: + PAM entry to follow current PAM policy in...

[SECURITY] [DSA 164-1] New cacti package fixes arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 164-1 [email protected] http://www.debian.org/security/ Martin Schulze September 10th, 2002 http://www.debian.org/security/faq -...

DSA-164 cacti - arbitrary code execution

Bulletin has no description...

CVE-2001-0201

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...

CVE-2001-0201

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...