[SA20115] Php Blue Dragon CMS "vsDragonRootPath" File Inclusion

TITLE: Php Blue Dragon CMS "vsDragonRootPath" File Inclusion SECUNIA ADVISORY ID: SA20115 VERIFY ADVISORY: http://secunia.com/advisories/20115/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Php Blue Dragon CMS 2.x http://secunia.com/product/9942/ DESCRIPTION: Kacper...

[Full-disclosure] Secunia Research: Abakt ZIP File Handling Buffer Overflow Vulnerability

====================================================================== Secunia Research 15/05/2006 - Abakt ZIP File Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA19846] FreeSSHd Key Exchange Algorithm String Buffer Overflow

TITLE: FreeSSHd Key Exchange Algorithm String Buffer Overflow SECUNIA ADVISORY ID: SA19846 VERIFY ADVISORY: http://secunia.com/advisories/19846/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeSSHd 1.x http://secunia.com/product/9607/ DESCRIPTION: Gerry...

[Full-disclosure] Secunia Research: Where Is It unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 09/05/2006 - Where Is It unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research https://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-003 Advisory Title: Cisco Secure ACS for Windows - Administrator Password Disclosure Author : Andreas Junestam Release Date : 05-08-2006...

[SA19984] Quake 3 Engine "remapShader" Command Buffer Overflow

TITLE: Quake 3 Engine "remapShader" Command Buffer Overflow SECUNIA ADVISORY ID: SA19984 VERIFY ADVISORY: http://secunia.com/advisories/19984/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Quake3 Engine 3.x http://secunia.com/product/4653/ DESCRIPTION: landser h...

[SA19952] Albinator File Inclusion and Cross-Site Scripting Vulnerabilities

TITLE: Albinator File Inclusion and Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA19952 VERIFY ADVISORY: http://secunia.com/advisories/19952/ CRITICAL: Highly critical IMPACT: Cross Site Scripting, System access WHERE: From remote REVISION: 1.1 originally posted 2006-05-04 SOFTWARE:...

[SA19922] CGI:IRC client.c Buffer Overflow Vulnerability

TITLE: CGI:IRC client.c Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19922 VERIFY ADVISORY: http://secunia.com/advisories/19922/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: CGI:IRC 0.x http://secunia.com/product/9687/ DESCRIPTION: A vulnerability...

[SA19581] ExtractNow unacev2.dll Buffer Overflow Vulnerability

TITLE: ExtractNow unacev2.dll Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19581 VERIFY ADVISORY: http://secunia.com/advisories/19581/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: ExtractNow 3.x http://secunia.com/product/9263/ DESCRIPTION: Secunia...

[SA19880] ClamAV Freshclam HTTP Header Buffer Overflow Vulnerability

TITLE: ClamAV Freshclam HTTP Header Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19880 VERIFY ADVISORY: http://secunia.com/advisories/19880/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/...

[Full-disclosure] MSIE Nested Object Vulnerability Is Exploitable

Hello, There has recently been some discussion regarding whether or not the MSIE Nested Object Vulnerability reported by Michal Zalewski is exploitable or not. Link to Michal Zalewski Full-Disclosure Posting: http://lists.grok.org.uk/pipermail/full-disclosure/2006- April/045422.html Because of...

Secunia Research: Servant Salamander unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 28/04/2006 - Servant Salamander unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA19686] Mac OS X Multiple Potential Vulnerabilities

TITLE: Mac OS X Multiple Potential Vulnerabilities SECUNIA ADVISORY ID: SA19686 VERIFY ADVISORY: http://secunia.com/advisories/19686/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote OPERATING SYSTEM: Apple Macintosh OS X http://secunia.com/product/96/ DESCRIPTION: Tom Ferr...

[SA19684] I-Rater Platinum "include_path" Parameter File Inclusion Vulnerability

TITLE: I-Rater Platinum "includepath" Parameter File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19684 VERIFY ADVISORY: http://secunia.com/advisories/19684/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: I-Rater Platinum http://secunia.com/product/9425/ DESCRIPTIO...

[SA19631] Firefox Multiple Vulnerabilities

TITLE: Firefox Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19631 VERIFY ADVISORY: http://secunia.com/advisories/19631/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Spoofing, Exposure of sensitive information, DoS, System access WHERE: From remote SOFTWARE: Mozilla...

[eVuln] QLnews XSS and PHP Code Insertion Vulnerabilities

New eVuln Advisory: QLnews XSS and PHP Code Insertion Vulnerabilities http://evuln.com/vulns/113/summary.html --------------------Summary---------------- eVuln ID: EV0113 CVE: CVE-2006-1575 CVE-2006-1576 Software: QLnews Sowtware's Web Site: http://www.vscripts.pl/ Versions: 1.2 Critical Level:...

[SA19563] MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue

TITLE: MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue SECUNIA ADVISORY ID: SA19563 VERIFY ADVISORY: http://secunia.com/advisories/19563/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x...

[SA19572] xzgv JPEG Image Parsing Heap Overflow Vulnerability

TITLE: xzgv JPEG Image Parsing Heap Overflow Vulnerability SECUNIA ADVISORY ID: SA19572 VERIFY ADVISORY: http://secunia.com/advisories/19572/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: xzgv 0.x http://secunia.com/product/4194/ DESCRIPTION: A vulnerability has...

[SA19531] OpenVPN LD_PRELOAD Environment Variable Pushing Vulnerability

TITLE: OpenVPN LDPRELOAD Environment Variable Pushing Vulnerability SECUNIA ADVISORY ID: SA19531 VERIFY ADVISORY: http://secunia.com/advisories/19531/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: OpenVPN 2.x http://secunia.com/product/5568/ DESCRIPTION: Hendrik Weime...

[SA19534] ClamAV Multiple Vulnerabilities

TITLE: ClamAV Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19534 VERIFY ADVISORY: http://secunia.com/advisories/19534/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: Some vulnerabilities...