[SA12813] phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability

TITLE: phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability SECUNIA ADVISORY ID: SA12813 VERIFY ADVISORY: http://secunia.com/advisories/12813/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: phpMyAdmin 2.x http://secunia.com/product/1720/ DESCRIPTION: A...

Full path disclosure in PHP Links

Nkxtox Advisory 0000-00003 Full path disclosure in PHP Links Date: 03/10/04 Bug: http://server/phplinks/index.php?show=juax0rx Warning: maininclude/juax0rx.php: failed to open stream: No such file or directory in /home/h4x0rsit3/b0x/phplinks/index.php on line 198 Warning: main: Failed opening...

[SA12694] AIX Network Authentication Service Multiple Vulnerabilities

TITLE: AIX Network Authentication Service Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12694 VERIFY ADVISORY: http://secunia.com/advisories/12694/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ SOFTWARE: IBM...

[SA12672] RealOne Player / RealPlayer / Helix Player Multiple Vulnerabilities

TITLE: RealOne Player / RealPlayer / Helix Player Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12672 VERIFY ADVISORY: http://secunia.com/advisories/12672/ CRITICAL: Highly critical IMPACT: Manipulation of data, System access WHERE: From remote SOFTWARE: RealPlayer 8...

[SA12684] dBpowerAMP Audio Player / Music Converter Playlist Handling Buffer Overflow

TITLE: dBpowerAMP Audio Player / Music Converter Playlist Handling Buffer Overflow SECUNIA ADVISORY ID: SA12684 VERIFY ADVISORY: http://secunia.com/advisories/12684/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: dBpowerAMP Music Converter 10.x...

Multiple Safari bugs

Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of system information, Exposure of sensitive information, Privilege escalation, DoS, System access...

[SA12455] Kazaa Altnet Download Manager Buffer Overflow Vulnerability

TITLE: Kazaa Altnet Download Manager Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12455 VERIFY ADVISORY: http://secunia.com/advisories/12455/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Kazaa 2.x http://secunia.com/product/616/ DESCRIPTION: CelebrityHacker...

[SA12446] Altnet Download Manager Buffer Overflow Vulnerability

TITLE: Altnet Download Manager Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12446 VERIFY ADVISORY: http://secunia.com/advisories/12446/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Altnet Download Manager 4.x http://secunia.com/product/3862/ DESCRIPTION:...

[SA12430] Winzip Unspecified Multiple Buffer Overflow Vulnerabilities

TITLE: Winzip Unspecified Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA12430 VERIFY ADVISORY: http://secunia.com/advisories/12430/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WinZip 9.x http://secunia.com/product/567/ WinZip 8.x...

[SA12387] Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability

TITLE: Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12387 VERIFY ADVISORY: http://secunia.com/advisories/12387/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Gaucho 1.x http://secunia.com/product/3843/ DESCRIPTION: Ta...

00045-08242004.txt

GulfTech Security Research August, 24th 2004 Vendor : EFS Software Inc. URL : http://www.sharing-file.com Version : Easy File Sharing Webserver v1.25 Risk : Unauthorized System Access && DoS Description: Easy File Sharing Web Server is a file sharing software that allows visitors to upload/downlo...

[SA12320] Heimdal ftpd Signal Handling Vulnerabilities

TITLE: Heimdal ftpd Signal Handling Vulnerabilities SECUNIA ADVISORY ID: SA12320 VERIFY ADVISORY: http://secunia.com/advisories/12320/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Heimdal 0.6.x http://secunia.com/product/3299/ DESCRIPTION:...

[SA12226] tnftpd Signal Handling Privilege Escalation Vulnerabilities

TITLE: tnftpd Signal Handling Privilege Escalation Vulnerabilities SECUNIA ADVISORY ID: SA12226 VERIFY ADVISORY: http://secunia.com/advisories/12226/ CRITICAL: Moderately critical IMPACT: System access, Privilege escalation WHERE: From remote SOFTWARE: tnftpd http://secunia.com/product/3800/...

Sun Java System Access Manager Version Detection

Binary data 4565.prm...

IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQL Injection, Account Manipulation, Cross-site Scripting, Information disclosure...

IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities

IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQ...

Mandrake Linux Security Advisory : pine (MDKSA-2001:047-1)

Versions of the Pine email client prior to 4.33 have various temporary file creation problems, as does the pico editor. These issues allow any user with local system access to cause any files owned by any other user, including root, to potentially be overwritten if the conditions were right. Upda...

Crystal Reports Vulnerabilities

Dear List, Impervatm's Application Defense Center has discovered several vulnerabilities in BusinessObject's Crystal Reports' Web Interface. These vulnerabilities allow a potential hacker to retrieve and delete any file from the file system of the server on which it runs, as well as causing a...

IBM Lotus Domino 6/7 - HTTP webadmin.nsf Directory Traversal

source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue reportedly exists in the server's administrative...

ShopCartCGI 2.3 - gotopage.cgi Traversal Arbitrary File Access

ShopCartCGI 2.3 - gotopage.cgi Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful...