[Full-disclosure] Secunia Research: Adobe Document/Graphics Server File URI Resource Access

====================================================================== Secunia Research 15/03/2006 - Adobe Document/Graphics Server File URI Resource Access - ====================================================================== Table of Contents Affected...

[SA19165] Nodez "op" File Inclusion and Cross-Site Scripting

TITLE: Nodez "op" File Inclusion and Cross-Site Scripting SECUNIA ADVISORY ID: SA19165 VERIFY ADVISORY: http://secunia.com/advisories/19165/ CRITICAL: Highly critical IMPACT: Cross Site Scripting, System access WHERE: From remote SOFTWARE: Nodez 4.x http://secunia.com/product/8640/ DESCRIPTION:...

[SA19175] Gallery "stepOrder[]" Local File Inclusion Vulnerability

TITLE: Gallery "stepOrder" Local File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19175 VERIFY ADVISORY: http://secunia.com/advisories/19175/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Gallery 2.x...

[SA19142] Owl Intranet Engine "xrms_file_root" File Inclusion Vulnerability

TITLE: Owl Intranet Engine "xrmsfileroot" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19142 VERIFY ADVISORY: http://secunia.com/advisories/19142/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Owl Intranet Engine 0.x http://secunia.com/product/1579/...

EV0076.txt

New eVuln Advisory: Guestex Shell Command Execution Vulnerability http://evuln.com/vulns/76/summary.html --------------------Summary---------------- eVuln ID: EV0076 CVE: CVE-2006-0777 Software: Guestext Sowtware's Web Site: http://www.teca-scripts.com/ Versions: 1.0 Critical Level: Dangerous Typ...

[SA18903] iUser Ecommerce common.php File Inclusion Vulnerability

TITLE: iUser Ecommerce common.php File Inclusion Vulnerability SECUNIA ADVISORY ID: SA18903 VERIFY ADVISORY: http://secunia.com/advisories/18903/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: iUser Ecommerce 2.x http://secunia.com/product/8175/ DESCRIPTION: ReZEN ha...

[SA18702] NJStar Word Processor Font Name Buffer Overflow

TITLE: NJStar Word Processor Font Name Buffer Overflow SECUNIA ADVISORY ID: SA18702 VERIFY ADVISORY: http://secunia.com/advisories/18702/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: NJStar Japanese Word Processor 5.x http://secunia.com/product/8154/ NJStar...

[SA18923] Leif M. Wright's Blog Multiple Vulnerabilities

TITLE: Leif M. Wright's Blog Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18923 VERIFY ADVISORY: http://secunia.com/advisories/18923/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Leif M...

[SA18909] Blue Coat ProxyAV Host Header Buffer Overflow Vulnerability

TITLE: Blue Coat ProxyAV Host Header Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA18909 VERIFY ADVISORY: http://secunia.com/advisories/18909/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network OPERATING SYSTEM: Blue Coat ProxyAV 2.x...

[SA18883] Plume CMS prepend.php File Inclusion Vulnerability

TITLE: Plume CMS prepend.php File Inclusion Vulnerability SECUNIA ADVISORY ID: SA18883 VERIFY ADVISORY: http://secunia.com/advisories/18883/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Plume CMS 1.x http://secunia.com/product/8085/ DESCRIPTION: unitedbr has...

[SA18843] WRQ Reflection Secure IT SFTP Format String Vulnerability

TITLE: WRQ Reflection Secure IT SFTP Format String Vulnerability SECUNIA ADVISORY ID: SA18843 VERIFY ADVISORY: http://secunia.com/advisories/18843/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: WRQ Reflection for Secure IT UNIX Server 6.x...

[SA18803] DocMGR process.php File Inclusion Vulnerability

TITLE: DocMGR process.php File Inclusion Vulnerability SECUNIA ADVISORY ID: SA18803 VERIFY ADVISORY: http://secunia.com/advisories/18803/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: DocMGR 0.x http://secunia.com/product/8021/...

[SA18810] Ansilove File Disclosure and File Upload Vulnerabilities

TITLE: Ansilove File Disclosure and File Upload Vulnerabilities SECUNIA ADVISORY ID: SA18810 VERIFY ADVISORY: http://secunia.com/advisories/18810/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information, System access WHERE: From remote SOFTWARE:...

[SA18598] PAM-MySQL SQL Logging and Authentication Vulnerabilities

TITLE: PAM-MySQL SQL Logging and Authentication Vulnerabilities SECUNIA ADVISORY ID: SA18598 VERIFY ADVISORY: http://secunia.com/advisories/18598/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: PAM-MySQL 0.x http://secunia.com/product/7880/ DESCRIPTION: Some...

Secunia Research: Lotus Notes UUE File Handling Buffer Overflow

====================================================================== Secunia Research 10/02/2006 - Lotus Notes UUE File Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

[SA16280] IBM Lotus Notes Multiple Vulnerabilities

TITLE: IBM Lotus Notes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA16280 VERIFY ADVISORY: http://secunia.com/advisories/16280/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: IBM Lotus Notes 6.x http://secunia.com/product/388/ IBM Lotus Notes 7.x...

[SA18767] FCKeditor File Upload Vulnerability

TITLE: FCKeditor File Upload Vulnerability SECUNIA ADVISORY ID: SA18767 VERIFY ADVISORY: http://secunia.com/advisories/18767/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: FCKeditor 2.x http://secunia.com/product/7973/ DESCRIPTION: rgod has discovered a...

Sun Java Reflection API security bypass vulnerabilities

Overview Multiple vulnerabilities in the Sun Java Reflection API may allow an untrusted Java applet to bypass security restrictions and execute arbitrary code. Description The Sun Java Reflection API allows Java classes to determine information about other Java classes, such as public methods...

[eVuln] PHP iCalendar File Inclusion Vulnerability

New eVuln Advisory: PHP iCalendar File Inclusion Vulnerability http://evuln.com/vulns/70/summary.html --------------------Summary---------------- eVuln ID: EV0070 Software: PHP iCalendar Sowtware's Web Site: http://phpicalendar.net/ Versions: 2.0.1 2.1 2.2 Critical Level: Dangerous Type: File...

[SA18762] Java Web Start Sandbox Security Bypass Vulnerability

TITLE: Java Web Start Sandbox Security Bypass Vulnerability SECUNIA ADVISORY ID: SA18762 VERIFY ADVISORY: http://secunia.com/advisories/18762/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Java Web Start 1.x http://secunia.com/product/1005/ Sun Java JDK 1.5.x...