DEBIAN-CVE-2011-0713

Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file...

OpenJDK Serialization inconsistencies (6966692)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.227 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from...

OpenJDK Deserialization Race condition (6559775)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.227 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from...

OpenJDK Swing mutable static (6938813)

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Octobe...

Joomla Component com_zoomportfolio SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Joomla Component comzoomportfolio SQL Injection Vulnerability ============================================================== Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn...

Cardinal CMS 1.2 Shell Upload

========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software...

cardinalCMS 1.2 - 'FCKeditor' Arbitrary File Upload

========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software...

OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Employee TimeClock Software 0.99 - SQL Injection

source: http://www.securityfocus.com/archive/1/509995 ====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software SQL Injection Vulnerabilities - ====================================================================== Table of...

Design/Logic Flaw

The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection o...

SAP NetWeaver XSS Vulnerability

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: NetWeaver/Web DynPro Vendor: SAP www.sap.com CVD ID: CVE-2008-3358 Subject: Cross-Site Scripting Vulnerability Risk: High Effect: Remotely exploitable Author: Martin Suess [email protected] Date: January 27th 20...

Secunia Research: Microsoft Word RTF Polyline/Polygon Integer Overflow

====================================================================== Secunia Research 09/12/2008 - Microsoft Word RTF Polyline/Polygon Integer Overflow - ====================================================================== Table of Contents Affected...

Firefox file location escaping flaw

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting XSS attacks or have unspecified other impact via a crafted filename...

Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulne

--/ INTRODUCTION -- Advisory : Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Web Directory / Search Engine v2.0 Impact : Remote Googledork : "Web Directory / Search Engine v2.0" ,...

Simple Accessible XHTML Online News v4.6 Remote File Include Exploit

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

[SA19633] Plone "member_id" Parameter Portrait Manipulation Vulnerability

TITLE: Plone "memberid" Parameter Portrait Manipulation Vulnerability SECUNIA ADVISORY ID: SA19633 VERIFY ADVISORY: http://secunia.com/advisories/19633/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Plone 2.x http://secunia.com/product/9334/...

[SA18464] Bit 5 Blog Script Insertion and SQL Injection Vulnerabilities

TITLE: Bit 5 Blog Script Insertion and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18464 VERIFY ADVISORY: http://secunia.com/advisories/18464/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Bit 5 Blog 8.x...

[SA13420] PHP Live! Unspecified Vulnerability

TITLE: PHP Live! Unspecified Vulnerability SECUNIA ADVISORY ID: SA13420 VERIFY ADVISORY: http://secunia.com/advisories/13420/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: PHP Live! 2.x http://secunia.com/product/4373/ DESCRIPTION: A vulnerability with an unknown impa...

[SA13413] IlohaMail Unspecified Vulnerability

TITLE: IlohaMail Unspecified Vulnerability SECUNIA ADVISORY ID: SA13413 VERIFY ADVISORY: http://secunia.com/advisories/13413/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: IlohaMail 0.8.x http://secunia.com/product/1039/ DESCRIPTION: A vulnerability with an unknown...

[SA12965] SKForum Unspecified "my wiki" and "wiki" Vulnerability

TITLE: SKForum Unspecified "my wiki" and "wiki" Vulnerability SECUNIA ADVISORY ID: SA12965 VERIFY ADVISORY: http://secunia.com/advisories/12965/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: SKForum 1.x http://secunia.com/product/4140/ DESCRIPTION: A vulnerability wit...