openSUSE 10 Security Update : yast2-core (yast2-core-4634)

This update fixes a security bug in yast2-core that allowed local attackers to provide malicious yast2 modules to yast2 that are executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. Thanks to Stefan Nordhausen for reporting th...

CVE-2007-5737

Technical details about CVE-2007-5737 are not publicly provided in the supplied documents. The description notes an unrestricted file upload in Korean GHBoard, but no affected versions, vectors, or fixes are given here. Monitor for updates.

Unfixed XSS vulnerability at www.defenseindustrydaily.com

Security researcher Skunkfoot, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.defenseindustrydaily.com, which at the time of submission ranked 55031 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007...

Apache Tomcat (webdav) Remote File Disclosure Exploit

No description provided by source. !/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to...

To the anonymous Phpbb visitor administrator permissions-bug warning-the black bar safety net

Visit a phpbb site, close firefox, double-click the exe, and then browse the site, already has administrator privileges. - the problem also things out in a cookie on | / Paisterist's code was nice but heres mil's version. precompiled: http://www.milw0rm.com/sploits/897.rar Usage: bcc32 897.cpp an...

actSite 1.991 Beta - 'base.php' Remote File Inclusion

'/ -.- ---------------------oOO------OOo-------------------- | actSite v1.991 Beta base.php Remote File Inclusion | | coded by DNX | -------------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.actsite.de ! Detected: 02.09.2007 ! Reported: 02.09.2007 ! Remote:...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...

The MYSQL read-write permissions into the system system permissions-bug warning-the black bar safety net

Previously I was in octal released a for MYSQL provide the right of the UDF, but it seems a lot of friends not really understand its use, people keep asking me and it's method of use, someone simply told me to write this UDF dedicated PHP. To be honest as I write this in PHP before you learn only...

Vulnerability in multiple "now playing" scripts for various IRC clients

In October 2006 I discovered many "now playing" scripts for various IRC clients allow an attacker to send commands to the IRC server on behalf of the user. Details ======= Many scripts for various IRC clients, that report the name of the currently playing song in a media player on IRC share the...

our de France Pool 1.0.1 Remote File İnclude Bug

------------Yollubunlar.Org---------------- Title : Tour de France Pool 1.0.1 Remote File nclude Bug Author : Yollubunlar.Org Orginal : http://yollubunlar.org/our-de-france-pool-101-remote-file-include-43.html Mail : [email protected] Down :...

wolioCMS SQL Injection

wolioCMS - SQL Injection and Bypass Administrator Login Vendor : http://www.buton.web.id/member.php?member=anon Download : http://www.buton.web.id/download/woliocms.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Exploit ini berhasil jika...

berthanas-sql.txt

Olmek Var$a Kaderde Dert Ekleme Derdine Team : Portal:Berthanas Ziyaretci Defteri v2.0 tr Sql İnjection Bug Author:Yollubunlar http://yollubunlar.org Exploit:Exploit:site.com/scriptpath/yonetici.asp Write user : ' OR '1'='1 Write Pass : ' OR '1'='1 than enter := You Are Admin : Greetz :...

wolioCMS Auth Bypass / Remote SQL Injection Vulnerabilities

No description provided by source. wolioCMS - SQL Injection and Bypass Administrator Login Vendor : http://www.buton.web.id/member.php?member=anon Download : http://www.buton.web.id/download/woliocms.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net...

corehttp 0.5.3alpha (httpd) Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ========================================================== corehttp 0.5.3alpha httpd Remote Buffer Overflow Exploit ========================================================== / corehttpv0.5.3alpha: httpd remote buffer overflow exploit. by:...

Security fix for the ALT Linux 8 package clamav version 0.91-alt1

July 13, 2007 Victor Forsyuk 0.91-alt1 - Fixes security bug: https://wwws.clamav.net/bugzilla/showbug.cgi?id=555 CVE-2007-3725. - Use of libcurl removed should improve stability...

Security fix for the ALT Linux 10 package clamav version 0.91-alt1

July 13, 2007 Victor Forsyuk 0.91-alt1 - Fixes security bug: https://wwws.clamav.net/bugzilla/showbug.cgi?id=555 CVE-2007-3725. - Use of libcurl removed should improve stability...

RHEL 5 : evolution-data-server (RHSA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

CentOS 5 : evolution-data-server (CESA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

RHEL 3 / 4 : evolution (RHSA-2007:0509)

Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw w...

CentOS 3 / 4 / 5 : fetchmail (CESA-2007:0385)

An updated fetchmail package that fixes a security bug is now available for Red Hat Enterprise Linux 2.1, 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility intended for use...