MySQL multiple security vulnerabilities

Buffer overflow and privilege escalation via COMFIELDLIST, DoS because of endless loop on network packet reading...

CVE-2010-2033

Directory traversal vulnerability in the Percha Multicategory Article comperchacategoriestree component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

MySQL Community Server < 5.1.47 / 5.0.91 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is earlier than 5.1.47 / 5.0.91 and is, therefore, potentially affected by the following vulnerabilities : - The server may continue reading packets indefinitely if it receives a packet larger than the maximum size of one packet,...

CVE-2010-1457

Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a 1 -c or 2 -a option, which prints file contents in an error message...

IM Worm Spreading on Yahoo Messenger

A smiley-faced instant message with a photo link posing as if it’s from someone on your buddy list is actually spreading misery worldwide in the form of a worm on Yahoo Instant Messenger: The IM ultimately delivers a worm that allows an attacker to take over the victim’s machine, not to mention...

Data Breaches Cost More in U.S.

A data breach in the United States could cost enterprises twice as much as the same breach costs companies in other countries with less stringent disclosure and notification laws, according to Ponemon Institute research. Read the full article. Dark Reading...

CVE-2010-1587

The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // slash slash initial substring in a URI for 1 admin/index.jsp, 2 admin/queues.jsp, or 3 admin/topics.jsp...

Directory traversal

Directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1531

Directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php...

Net Solutions' Hack Heightens Role of ISP in App Layer Security

According to research, the malicious iframe used in the latest Network Solutions attack pointed to corpadsinc.com which then downloads Adobe exploits onto victims’ machines. The hacks raise an issue increasingly being faced by Website owners: what’s the responsibility of the ISP or service or clo...

IE8 Open to XSS Attacks

The good news is that Microsoft’s Internet Explorer 8 browser offers a new set of filters designed to prevent some cross-site scripting XSS attacks. The bad news is that those same filters could be used to enable XSS attacks. That was the gist of a presentation offered by security researchers Dav...

[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2032-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 11, 2010 http://www.debian.org/security/faq -...

CVE-2010-1309

Directory traversal vulnerability in Irmin CMS formerly Pepsi CMS 0.6 BETA2 allows remote attackers to read arbitrary files via a .. dot dot in the w parameter to index.php...

Easy Icon Maker Crash

! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX 00000000 EDX 00000000 EBX 00000000 ESP...

Easy Icon Maker - '.ico' File Reading Crash

!/usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX 00000000 EDX 00000000 EBX 00000000 ESP...

Easy Icon Maker - .ico File Reading Crash

Easy Icon Maker - .ico File Reading Crash ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX...

Easy Icon Maker .ico File Reading Crash

Exploit for windows platform in category dos / poc ======================================= Easy Icon Maker .ico File Reading Crash ======================================= ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : email protect...

PostNuke FormExpress Module - Blind SQL Injection

Date: 17/03/2010 Software Link: http://sourceforge.net/projects/pn-formexpress/ Version: 0.3.2 PostNuke ContentExpress Module Blind Sql Injection Reported by Sharif University of Technology CSIRT Vulnerability Analysis and Penetration Testing Group cert.sharif.edu , nsc.sharif.edu === POC ===...

Mandriva Linux Security Advisory : poppler (MDVSA-2010:055)

An out-of-bounds reading flaw in the JBIG2 decoder allows remote attackers to cause a denial of service crash via a crafted PDF file CVE-2009-0799. Multiple input validation flaws in the JBIG2 decoder allows remote attackers to execute arbitrary code via a crafted PDF file CVE-2009-0800. An integ...

CVE-2009-4665

CVE-2009-4665 affects CuteSoft Components Cute Editor for ASP.NET. Affected component: CuteSoft_Client/CuteEditor/Load.ashx. Vulnerability type: directory traversal via the file parameter using a .. payload, enabling reading of arbitrary files. Base CVSS v2 score 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) ...