Secunia Research: ArGoSoft Mail Server Pro viewheaders Script Insertion

====================================================================== Secunia Research 27/02/2006 - ArGoSoft Mail Server Pro viewheaders Script Insertion - ====================================================================== Table of Contents Affected...

[SA16902] PHPLIB Unspecified Code Execution Vulnerability

TITLE: PHPLIB Unspecified Code Execution Vulnerability SECUNIA ADVISORY ID: SA16902 VERIFY ADVISORY: http://secunia.com/advisories/16902/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PHPLIB 7.x http://secunia.com/product/8300/ DESCRIPTION: A vulnerability has been...

Secunia Research: Visnetic AntiVirus Plug-in for MailServer Privilege Escalation

====================================================================== Secunia Research 23/02/2006 - Visnetic AntiVirus Plug-in for MailServer Privilege Escalation - ====================================================================== Table of Contents Affected...

Lotus Notes Attachment Viewer UUE file buffer overflow

Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...

Buffer overflow

Buffer overflow in BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow...

DBeSession102.txt

GulfTech Security Research February 11, 2006 Vendor : Lawrence Osiris URL : http://www.phpclasses.org/browse/package/1624.html Version : DBeSession 1.0.2 Risk : SQL Injection Description: DBeSession is a feature-packed PHP class that stores the session data in a MySQL database rather than files. ...

[SA18805] DB_eSession "deleteSession()" Function SQL Injection

TITLE: DBeSession "deleteSession" Function SQL Injection SECUNIA ADVISORY ID: SA18805 VERIFY ADVISORY: http://secunia.com/advisories/18805/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: DBeSession 1.x http://secunia.com/product/8010/ DESCRIPTION: James...

Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow

====================================================================== Secunia Research 10/02/2006 - Lotus Notes TAR Reader File Extraction Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows

====================================================================== Secunia Research 10/02/2006 - Lotus Notes HTML Speed Reader Link Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes UUE File Handling Buffer Overflow

====================================================================== Secunia Research 10/02/2006 - Lotus Notes UUE File Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes Multiple Archive Handling Directory Traversal

====================================================================== Secunia Research 10/02/2006 - Lotus Notes Multiple Archive Handling Directory Traversal - ====================================================================== Table of Contents Affected...

[SA16280] IBM Lotus Notes Multiple Vulnerabilities

TITLE: IBM Lotus Notes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA16280 VERIFY ADVISORY: http://secunia.com/advisories/16280/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: IBM Lotus Notes 6.x http://secunia.com/product/388/ IBM Lotus Notes 7.x...

[SA18765] CPAINT "cpaint_response_type" Cross-Site Scripting

TITLE: CPAINT "cpaintresponsetype" Cross-Site Scripting SECUNIA ADVISORY ID: SA18765 VERIFY ADVISORY: http://secunia.com/advisories/18765/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CPAINT 1.x http://secunia.com/product/5543/ CPAINT 2.x...

Power Daemon <= 2.0.2 (WHATIDO) Remote Format String Exploit

Exploit for linux platform in category remote exploits ============================================================ Power Daemon include include include include include include include include include include /== Prototypes ==/ void fatalchar ; void Usagechar ; void FakeServerchar ,int; void...

[SA16100] Verity KeyView Viewer SDK Multiple Vulnerabilities

TITLE: Verity KeyView Viewer SDK Multiple Vulnerabilities SECUNIA ADVISORY ID: SA16100 VERIFY ADVISORY: http://secunia.com/advisories/16100/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Verity KeyView Viewing SDK http://secunia.com/product/5570/...

[Full-disclosure] Re: cPanel Multiple Cross Site Scripting Vulnerability

One more to ur list http://localhost:2095/dowebmailforward.cgi?fwd=3Cscript3Ealert28document.cookie293B3C2Fscript3E&action=Add+Forwarder Sumit On 2/4/06, Hamish Stanaway [email protected] wrote: Hi there, Thank you for finding this vulnerability in a widely used software. I was wondering i...

eyeOS &lt;= 0.8.9 Remote Code Execution

GulfTech Security Research February 7, 2006 Vendor : eyeOS Project URL : http://www.eyeos.org/ Version : eyeOS = 0.8.9 Risk : Remote Code Execution Description: eyeOS is a "web based operating system" written in php, that lets you access your data and your applications from anywhere with an...

eyeOS089.txt

GulfTech Security Research February 7, 2006 Vendor : eyeOS Project URL : http://www.eyeos.org/ Version : eyeOS = 0.8.9 Risk : Remote Code Execution Description: eyeOS is a "web based operating system" written in php, that lets you access your data and your applications from anywhere with an...

[SA18718] MPlayer ASF File Parsing Integer Overflow Vulnerabilities

TITLE: MPlayer ASF File Parsing Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA18718 VERIFY ADVISORY: http://secunia.com/advisories/18718/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: MPlayer 1.x http://secunia.com/product/2255/ DESCRIPTION: AFI...

neomailXSS.txt

Title: Neomail Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Discovered: 24 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail Perl Client Vendor: neomail / www.neocodesolutions.com Vulnerability: Cross Site Scripting / Cookie-The...