DTSA-95-1 e2fsprogs - multiple integer overflows

Bulletin has no description...

CVE-2007-6077

The session fixation protection mechanism in cgiprocess.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookieonly attribute from the DEFAULTSESSIONOPTIONS constant, which effectively causes cookieonly to be applied only to the first instantiation of CgiRequest, which allows remote...

ExoPHPdesk user profile XSS / profile SQL injection

ExoPHPdesk user profile XSS / profile SQL injection http://exoscripts.com/exohelpdesk You can inject script code into the website area where you create profile. Cookies are in place making an XSS more than possible. http://example.com/helpdesk/index.php?fn=profile&s=&user=admin' sql here SQL...

Design/Logic Flaw

The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands. NOTE: this is only a vulnerability in environments in which the administrator has not followed documentation that outlines the...

CVE-2007-4749

The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands. NOTE: this is only a vulnerability in environments in which the administrator has not followed documentation that outlines the...

CVE-2007-4749

The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands. NOTE: this is only a vulnerability in environments in which the administrator has not followed documentation that outlines the...

Note:the IIS under another dangerous ISAPI extension-a vulnerability warning-the black bar safety net

We first look at a report on the SSI: SSI what is the use? The reason you want to pull to the ssi, because shtml--server-parsed HTML of the acronym. Contains embedded server-side include command in the HTML text. In is transmitted to the browser before the server will SHTML document is completely...

GLSA-200708-13 : BIND: Weak random number generation

The remote host is affected by the vulnerability described in GLSA-200708-13 BIND: Weak random number generation Amit Klein from Trusteer reported that the random number generator of ISC BIND leads, half the time, to predictable 1 chance to 8 query IDs in the resolver routine or in zone transfer...

Design/Logic Flaw

NetClassifieds Premium Edition does not use encryption for 1 stored passwords or 2 sensitive data, which might allow attackers to obtain information via certain vectors...

Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net

On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...

Ce-Admin news publishing system vulnerability analysis-vulnerability warning-the black bar safety net

The news publishing system is currently mainly used for a picture news release, due to the generated html, the browsing speed is very fast, resulting in a more modified version, currently found in at least 4 modified version, the user group of the majority, although modified, but still there are...

Include file vulnerability details-vulnerability warning-the black bar safety net

Author: IceskYsl@1st Source: Joystiq1. S. Thttp://www.1steam.cn/ Affirmed: the original, welcome to reprint, please indicate the source rambled1. S. Thttp://www.1steam.cn/ ============= First, let's discuss the include file vulnerability,the first thing to ask is,what is"remote file inclusion...

Multiple Oracle application server vulnerabilities

SQL injections, DoS, data modification, crossite scripting, privilege escalation, audit setings modification. Password is passed from JDeveloper to SQLPlus in cleartext. JDeveloper password is stored in cleartext in different XML configuration files. Cleartext FormBuilder password is stored in...

Online BookMarks Multiple SQL Injection/XSS Vulnerabilities

3/12/06 Vigilon Advisory http://www.vigilon.com/vg-onlinebookmarks-3-12-2006.txt ------------------------------------------------------- Application: OnLine Bookmarks Web Site: http://www.frech.ch/online-bookmarks/ Versions: 0.6.12 Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting...

SIMPLOG 0.9.3 injection sql & multiple xss

SIMPLOG 0.9.3 cms website : http://www.simplog.org/ xss: Administration Panel - user.php Name URL Email API Key Flickr Email Flickr Password - news.php URL - edit.php Title Entry Manual TrackBack = risk very low SimpLog User Part...

osCommerce 2.2 - '/admin/products_attributes.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

EUVD-2006-5006

Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter in manager/pages/ scripts including 1 AccountsPage.class.php, 2 AddInvoicePage.class.php, 3 AddIPAddressPage.class.php, 4...

RE: Computer Associates eTrust Security Command Center Multiple Vulnerabilities

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Computer Associates - eTrust Security Command Center http://www3.ca.com/solutions/Product.aspx?ID=4351 "eTrust Security Command Center helps you discover and prioritize relevan...

Virtual War v1.5.0 <= Sql Injection vuln

Vendor : www.vwar.de Vuln. Ver. : 1.5.0 and lower Dork : "Powered by : Virtual War v1.5.0" intext:"www.vwar.de" ------------------------------------------- Author : MFox Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team ------------------------------------------- PoC :...

Hack experience of scratch self-test system vulnerabilities-vulnerability warning-the black bar safety net

The recent hacker attacks occur frequently, our friends also continue to have QQ, E-mail and game account theft incidents. Now the hackers techniques toward popularity direction of the trend, to grasp the attack to others system technology more and more people, as long as your computer is a littl...