SA-2007-025 - Drupal core - Arbitrary code execution via installer.

The Drupal installer allows any visitor to provide credentials for a database when the site's own database is not reachable. This allows attackers to run arbitrary code on the site's server. An immediate workaround is the removal of the file install.php in the Drupal root directory. Versions...

openSUSE 10 Security Update : spamassassin (spamassassin-1904)

This update fixes the following security problem in SpamAssassin : - CVE-2006-2447: SpamAssassin when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop...

SUSE-SA:2007:045: IBM Java, Sun Java

The remote host is missing the patch for the advisory SUSE-SA:2007:045 IBM Java, Sun Java. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:045 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2007:043: kernel

The remote host is missing the patch for the advisory SUSE-SA:2007:043 kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:043 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:046: flash-player

The remote host is missing the patch for the advisory SUSE-SA:2007:046 flash-player. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:046 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2007:038: krb5

The remote host is missing the patch for the advisory SUSE-SA:2007:038 krb5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:038 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:049: MozillaFirefox,MozillaThunderbird,SeaMonkey

The remote host is missing the patch for the advisory SUSE-SA:2007:049 MozillaFirefox,MozillaThunderbird,SeaMonkey. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:049 if ! definedfunc"bnrandom" exit0;...

SUSE-SA:2007:048: qt3

The remote host is missing the patch for the advisory SUSE-SA:2007:048 qt3. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:048 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:052: OpenOffice_org

The remote host is missing the patch for the advisory SUSE-SA:2007:052 OpenOfficeorg. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:052 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2007:050: opera

The remote host is missing the patch for the advisory SUSE-SA:2007:050 opera. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:050 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:037: OpenOffice_org

The remote host is missing the patch for the advisory SUSE-SA:2007:037 OpenOfficeorg. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:037 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2007:033: clamav

The remote host is missing the patch for the advisory SUSE-SA:2007:033 clamav. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:033 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:040: file

The remote host is missing the patch for the advisory SUSE-SA:2007:040 file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:040 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

Black Lily 2007 - 'products.php?class' SQL Injection

SnIper-sa.com SSSSS nnn nn ii ppppppp eeeeeeeee rrrrr ss nn nn nn ii pp p ee rr rr s nn nn nn ii pp p ee rr r ss nn nn nn ii ppppppp ee rr rr sssss nn nn nn ii pp eeeeee rrrr ss nn nn nn ii pp ee rrrr s nn nn nn ii pp ee rr rr ss nn nnn ii pp ee rr rr sssss nn nnn ii pp eeeeeeeeee rr rr VerY-SecR...

Sa-blog 0day-vulnerability warning-the black bar safety net

Quotation First:use is PHP5,is because of the SERVER variables are not affected by the'quotes of the limit,even if it is open the escape vulnerabilityin the User-Agent second:the insert into a plurality of data inserted in the text structure of the place is insert INTO $dbprefixsessions...

MIT Kerberos 5 kadmind privilege escalation vulnerability

Overview MIT Kerberos kadmind contains a privilege escalation vulnerability that may allow an authenticated attacker to execute code with root privileges. Description Kerberos is a network authentication system that uses a trusted third party to authenticate clients and servers to each other. It ...

joomlaexpose-rfu.txt

HHHHHHH HHHHHH HH HHHHHHHH HHHHHH HHHHHHHH IHHI HH HH HHHHHHHH HH HH HH HH HH HHHHHHHH HH IHHI HH HHH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHHH HHHHHH HH HHHHHHH HHHHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HHH HHHHHHHH HH HH H...

Joomla! Component Expose RC35 - Arbitrary File Upload

HHHHHHH HHHHHH HH HHHHHHHH HHHHHH HHHHHHHH IHHI HH HH HHHHHHHH HH HH HH HH HH HHHHHHHH HH IHHI HH HHH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHHH HHHHHH HH HHHHHHH HHHHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HHH HHHHHHHH HH HH H...

fusetalkpoc-sql.txt

Hello everyone, After trying to report bugs to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure Policy v2.0, we...

fusetalk CSS (comfinish.cfm)

Hello everyone, After trying to report a SQL bug autherror.cfm to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure...