[security bulletin] HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01293337 Version: 1 HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Relea...

mailman security and bug fix update

2.1.5.1-34.rhel4.6 - fix 200036 - canceling subscription confirmation crashes mailman - fix 205651 - CVE-2006-4624 logfile CRLF injection - fix 230939 - missing migrate-fhs script - fix 223191 - spam filters gets deleted when sender filter is edited - fix 242677 - wrong init script...

alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================== alstrasoft E-Friends = 4.98 seid Multiple SQL Injection Vulnerabilities ========================================================================== \ /\ \ / | \ \ | ...

Low: Red Hat Security Advisory: mailman security and bug fix update

Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...

CVE-2007-5228

CVE-2007-5228 is a Drupal XSS vulnerability in the subscription functionality of the Project issue tracking module. The issue enables remote authenticated users with project create or edit permissions to inject arbitrary web script or HTML via unspecified vectors in the (1) individual and (2) ove...

SA-2007-021: Project issue tracking - XSS vulnerabilities in subscription forms.

The Project issue tracking module provides a subscription functionality enabling users to sign up for e-mail notification of issue updates. The subscriptions can be edited on both an individual or overview form. Users who have permissions to create or edit projects may be able to inject arbitrary...

SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities

netVigilance Security Advisory 70 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities Description: SimpNews is a news system written in PHP. Features: Data stored in MySQL, admin interface, support for multiple languages, support for multiple instances in one database, own header, multip...

[security bulletin] HPSBMA02237 SSRT061260 rev.1 - HP OpenView Performance Agent &#40;OVPA&#41; Running Shared Trace Service, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01109584 Version: 1 HPSBMA02237 SSRT061260 rev.1 - HP OpenView Performance Agent OVPA Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information in this Security Bullet...

[security bulletin] HPSBMA02241 SSRT061260 rev.1 - HP OpenView Service Quality Manager &#40;OV SQM&#41; Running Shared Trace Service, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01111851 Version: 1 HPSBMA02241 SSRT061260 rev.1 - HP OpenView Service Quality Manager OV SQM Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information in this Securit...

[security bulletin] HPSBMA02245 SSRT061260 rev.1 - HP OpenView Dashboard Running Shared Trace Service, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01114156 Version: 1 HPSBMA02245 SSRT061260 rev.1 - HP OpenView Dashboard Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information in this Security Bulletin should be...

CVE-2007-4193

Multiple cross-site request forgery CSRF vulnerabilities in index.php in IDE Group DVD Rental System DRS 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by 1 modifying data or 2 canceling a subscription. NOTE: it is not clear whether IDE...

[security bulletin] HPSBPI02228 SSRT071404 rev.1 - HP Instant Support - Driver Check Running on Windows XP, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01077597 Version: 1 HPSBPI02228 SSRT071404 rev.1 - HP Instant Support - Driver Check Running on Windows XP, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be...

[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage &#40;SMH&#41; for Linux, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...

Unfixed XSS vulnerability at www.mobilemag.com

Security researcher InSiDe, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.mobilemag.com, which at the time of submission ranked 27287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is current...

[security bulletin] HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager &#40;SIM&#41; for Windows, Remote Privileged Access and Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01049713 Version: 1 HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager SIM for Windows, Remote Privileged Access and Arbitrary Code Execution NOTICE: The information in this Security...

McAfee Security Center McSubMgr.DLL ActiveX控件远程溢出漏洞

McAfee Security Center是用于控制和监控McAfee安全产品的集中配置GUI。 McAfee Security Center的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 SecurityCenter所安装的Subscription Manager ActiveX控件： ProgId：McSubMgr.McSubMgr ClassId：9BE8D7B2-329C-442A-A4AC-ABA9D7572602 文件：MCSUBMGR.DLL, McAfee Subscription manager module 6.0.0.13...

Buffer overflow

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control MCSUBMGR.DLL in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument...

CVE-2007-2584

CVE-2007-2584 describes a buffer overflow in the IsOldAppInstalled function of McSubMgr.McSubMgr (MCSUBMGR.DLL) used by McAfee SecurityCenter. Vulnerable are SecurityCenter versions before 6.0.25 and 7.x before 7.2.147. A crafted argument can allow remote code execution with full impact on confid...

Campsite 2.6.1 - SubscriptionDefaultTime.php?g_documentRoot Remote File Inclusion

Campsite 2.6.1 - SubscriptionDefaultTime.php?gdocumentRoot Remote File Inclusion source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver...

paypal-inject.txt

Paypal Subscription Manager allows webmaster easily create subscription web site, visitors can access to digital product instantly after paying through Paypal, PSM provides ability to effortlessly process subscription and protect membership areas. PSM uses PHP and MySQL for fast, efficient,...