PowerBook 1.21 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== PowerBook 1.21 index.php page Local File Inclusion Vulnerability ================================================================== DSECRG-08-019 Digital Security Research...

[DSECRG-08-019] LFI in PowerBook 1.21

Hello, bugtraq. DSECRG-08-031 Digital Security Research Group DSecRG Advisory Application: PowerBook Versions Affected: 1.21 Vendor URL: http://www.powerscripts.org/ Bug: Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory: ..2008...

DSECRG-08-021.txt

DSECRG-08-021 Digital Security Research Group DSecRG Advisory Application: PowerPHPBoard Versions Affected: 1.00b Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory: 24.03.2008...

PowerBook 1.21 - index.php Local File Inclusion

PowerBook 1.21 - index.php Local File Inclusion DSECRG-08-019 Digital Security Research Group DSecRG Advisory Application: PowerBook Versions Affected: 1.21 Vendor URL: http://www.powerscripts.org/ Bug: Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Dat...

AST-2008-002: Two buffer overflows in RTP Codec Payload Handling

Asterisk Project Security Advisory - AST-2008-002 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Two buffer overflows in RTP Codec Payload | | | Handling |...

CentOS 4 / 5 : evolution (CESA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory Traversal Vulnerability

No description provided by source. ------------------------------------------------------------------------------------ Digital Security Research Group DSecRG Advisory DSECRG-08-018...

RHEL 4 / 5 : evolution (RHSA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

Critical: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

[DSECRG-08-017] Flyspray 0.9.9.4 Multiple Security Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-017 Application: Flyspray web-based bug tracking system Versions Affected: 0.9.9.4 Vendor URL: http://www.flyspray.org Bugs: SiXSS, Stored XSS, Brute Force Exploits: YES Reported: 08.02.2008 Vendor response: 08.02.2008 Solution: 24.02.2008...

symantecback-overflow.txt

Symantec BackupExec Calendar ControlPVCalendar.ocx BoF Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Symantec BackupExec Calendar Control (PVCalendar.ocx) BoF Exploit

No description provided by source. !-- Symantec BackupExec Calendar ControlPVCalendar.ocx BoF Exploit Vulnerability discovered by JJ Reyes of Secunia Research http://secunia.com/advisories/27885/ written by e.b...

Symantec BackupExec Calendar Control (PVCalendar.ocx) BoF Exploit

Exploit for unknown platform in category remote exploits ================================================================= Symantec BackupExec Calendar Control PVCalendar.ocx BoF Exploit ================================================================= Symantec BackupExec Calendar...

Symantec BackupExec Calendar Control - 'PVCalendar.ocx' Remote Buffer Overflow

Symantec BackupExec Calendar ControlPVCalendar.ocx BoF Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Symantec BackupExec Calendar Control - PVCalendar.ocx Remote Buffer Overflow

Symantec BackupExec Calendar Control - PVCalendar.ocx Remote Buffer Overflow Symantec BackupExec Calendar ControlPVCalendar.ocx BoF Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf

This paper is the result of various security assessments performed on several ZyXEL Prestige devices in both, a controlled environment computer lab and production environments during several penetration tests. There are two types of attacks featured in this paper which we believe might be...

iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability

iDefense Security Advisory 02.20.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 20, 2008 I. BACKGROUND The Veritas Storage Foundation is based on the Veritas File System and Veritas Volume Manager products. It allows virtualization of storage over a variety of platforms. It contain...

[email protected], [email protected], [email protected]

Digital Security Research Group DSecRG Advisory DSECRG-08-016 Application: Jinzora Media Jukebox Versions Affected: 2.7.5 Vendor URL: http://www.jinzora.com/ Bugs: Multiple XSS Injections Exploits: YES Reported: 04.02.2008 Second report: 12.02.2008 Vendor response: NONE Date of Public Advisory:...

[DSECRG-08-011 | FIX INFORMATION] Astrosoft HelpDesk Multiple XSS

Digital Security Research Group DSecRG Advisory DSECRG-08-011 | FIX INFORMATION Application: Astrosoft HelpDesk Versions Affected: 1.95.228 Vendor URL: http://astrosoft.ru/ Bugs: Multiple XSS Injections Exploits: YES Reported: 29.01.2008 Date of Public Advisory: 04.02.2008 Vendor response:...

PowerNews (Newsscript) 2.5.6 Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution:...