6462 matches found
[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...
security flaw
The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...
CVE-2006-3665
SquirrelMail 1.4.6 and earlier, with registerglobals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors. NOTE: while "cookie theft" is frequently associated with XSS, the vendor disclosure is too vague to be certain of this...
AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities
AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/18859/info The AdPlug library is affected by multiple remote buffer-overflow vulnerabilities. These issues are due to the library's failure to properly bounds-check user-supplied input...
free QBoard 1.1 - features.php?qb_path Remote File Inclusion
free QBoard 1.1 - features.php?qbpath Remote File Inclusion source: https://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the attacker t...
CentOS 3 / 4 : sendmail (CESA-2006:0515)
Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated to the...
Randshop <= 1.1.1 (header.inc.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Randshop = 1.1.1 header.inc.php Remote File Include Vulnerability ==================================================================== Title : randshop = 1.1.1 Remote Fil...
[Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability
Kurdish Security Advisory MF Piadas 1.0 Remote File Include Vulnerability "Ey Tarih ya sana basarilar atfedecegiz ya da seni yasanmamis sayacagiz ." Abdullah Ocalan STOP THE MASSACRE IN THE TURKEY! FREEDOM FOR KURDISTAN ! Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com &...
BlueDragon Server 6.2.1 - .cfm Denial of Service
BlueDragon Server 6.2.1 - .cfm Denial of Service source: https://www.securityfocus.com/bid/18624/info BlueDragon is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed GET requests. An attacker can exploit this issue to...
Opera 9 (long href) Remote Denial of Service Exploit
Exploit for multiple platform in category dos / poc ==================================================== Opera 9 long href Remote Denial of Service Exploit ==================================================== a...
jobline.txt
SaVSaK.CoM | SpC-x - TheBeKiR | Jobline 1 1 1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Jobline Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : if fileexists "$mosConfigabsolutepath/components/$option/language/$mosConfiglang.php"...
sendmail security update
CentOS Errata and Security Advisory CESA-2006:0515 Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red H...
[Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability
Title: Kil13r-SA-20060609-1 Daum Search Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/09 - Discovery 2006/06/09 - Vendor notification 2006/06/09 - Release Affected version: Not affected version: Description: Daum is internet...
[Full-disclosure] MDaemon NOT vulnerable .. sorry for the advisory.. QBik Wingate is vulnerable
Hello this is kcope, recently I thought I had discovered a remote preauth vulnerability in MDaemon latest version 9.0.1/9.0.2. And it really looked like one in the debugger OllyDbg .. so I posted it to full disclosure. Afterwards I tried to write an exploit, and yes I succeeded! But the problem i...
PT-2006-3508 · Zyxel · Zyxel P-335Wt
Name of the Vulnerable Software and Affected Versions: ZyXEL P-335WT router affected versions not specified Description: The issue allows remote attackers to bypass access restrictions and conduct unauthorized operations. This is achieved via a UPnP request with a modified InternalClient paramete...
SAPwebas.txt
Release Date: 03/01/2006 Affected Applications: SAP WebAS Kernel up to version 7.00 Affected Platforms: Platform-Independant Local / Remote: Remote Severity: Medium to High Author: A. Grossmann arnold.grossmann at gmail.com Vendor Status: Confirmed Product Overview cited from SAP :...
[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)
Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...
[SA20043] EImagePro SQL Injection Vulnerabilities
TITLE: EImagePro SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA20043 VERIFY ADVISORY: http://secunia.com/advisories/20043/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: EImagePro http://secunia.com/product/9843/ DESCRIPTION: DjEyes has reported som...
[SECURITY] [DSA 1045-1] New OpenVPN packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1045-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2006 http://www.debian.org/security/faq -...
[eVuln] vCounter - sourceworkshop SQL Injection Vulnerability
New eVuln Advisory: vCounter - sourceworkshop SQL Injection Vulnerability http://evuln.com/vulns/108/summary.html --------------------Summary---------------- eVuln ID: EV0108 CVE: CVE-2006-1499 Software: vCounter Sowtware's Web Site: http://www.sourceworkshop.com/ Versions: 1.0 Critical Level:...