SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 1896)

This kernel update fixes the following security problems : - A race condition allows local users to gain root privileges by changing the file mode of /proc/self/ files in a way that causes those files for instance /proc/self/environ to become setuid root. 192688. CVE-2006-3626 - A stack-based...

CVE-2007-6300

Cross-site request forgery CSRF vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors...

CVE-2007-6300

The CVE-2007-6300 entry describes a Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0. Affected software: Fusion News 3.9.0 (web application). What is vulnerable: CSRF vulnerability that could allow remote attackers to perform unauthorized actions via unspecified vectors. Conse...

CVE-2007-6300

Cross-site request forgery CSRF vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors...

MoBiC-19: HBH-Fusion CAPTCHA bypass

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в капче HBH-Fusion. Система HBH-Fusion является модификацией PHP-Fusion. Данная капча уязвима для session reusing with constant captcha bypass method. Insufficient Anti-automation: Эксплоит:...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. HBH-Fusion: CAPTCHA protection bypass...

MoBiC-18: PHP-Fusion CAPTCHA bypass

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в капче PHP-Fusion. Данная капча уязвима для session reusing with constant captcha bypass method. Insufficient Anti-automation: Эксплоит:...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHP-Fusion: CAPTCHA protection bypass...

PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net &...

Solaris 8 (sparc) : 124672-20

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful...

Solaris 9 (x86) : 124673-20

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful...

Solaris 9 (sparc) : 124672-20

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful...

Solaris 10 (x86) : 124673-20 (deprecated)

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful...

Solaris 10 (sparc) : 124672-20 (deprecated)

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful...

PHP-Fusion module Expanded Calendar 2.x SQL Injection Exploit

No description provided by source. ?php printr" / Expanded Calendar 2.x PHP-Fusion module User pass disclosure exploit Found by Matrix86 of Rbt-4 Crew Site: www.rbt-4.net Mail: infoatrbt-4dotnet Bug found in &nbsp...

CVE-2007-5187

SQL injection vulnerability in infusions/calendareventspanel/showsingle.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter...

Sql injection

SQL injection vulnerability in infusions/calendareventspanel/showsingle.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter...

CVE-2007-5187

The CVE-2007-5187 entry describes a SQL injection vulnerability in the Expanded Calendar 2.x module for PHP-Fusion, specifically in infusions/calendar_events_panel/show_single.php, where an attacker can pass input through the sel parameter to execute arbitrary SQL commands. This is tied to remote...

CVE-2007-5187

SQL injection vulnerability in infusions/calendareventspanel/showsingle.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter...