9545 matches found
phpMyChat <= 0.14.5 (SYS enter) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= phpMyChat query"INSERT INTO ".CMSGTBL." VALUES $T, '$R', 'SYS exit', '', ".time.", '', 'sprintfLEXITROM, "".specialchar$U,$Latin1,1.""'"; $kicked = 3; ... have a look to "T"...
[SA19448] VBook Multiple Vulnerabilities
TITLE: VBook Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19448 VERIFY ADVISORY: http://secunia.com/advisories/19448/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, System access WHERE: From remote SOFTWARE: VBook 2.x http://secunia.com/product/9051/...
Update Protection against ezDatabase Remote File Inclusion Vulnerability
ezDatabase is a Web based application designed for creating online databases. A vulnerability in ezDatabase allows remote attackers to execute arbitrary PHP code via several parameters. Attackers may be able to disclose sensitive information and compromise an affected system...
GLSA-200603-19 : cURL/libcurl: Buffer overflow in the handling of TFTP URLs
The remote host is affected by the vulnerability described in GLSA-200603-19 cURL/libcurl: Buffer overflow in the handling of TFTP URLs Ulf Harnhammar reported a possible buffer overflow in the handling of TFTP URLs in libcurl due to the lack of boundary checks. Impact : An attacker could exploit...
Fortinet Security Advisory: FSA-2006-08
Fortinet Security Advisory: FSA-2006-08 Microsoft Excel Column Index Improper Memory Access Advisory Date : March 14, 2006 Reported Date : January 24, 2006 Vendor : Microsoft Affected Products : Microsoft Excel 2003 Chinese Version Windows XP Home Edition Chinese Version and possible all versions...
EasyFile.txt
Easy File Sharing Web Server Multiple Vulnerablilities Software: Easy File Sharing Web Server Version: 3.2 Website: http://www.sharing-file.com/ Description: Easy File Sharing Web Server is a Windows program that allows you to host a secure peer-to-peer and web-based file sharing system without a...
txtForum 1.0.31.0.4 - Remote PHP Script Code Injection
txtForum 1.0.31.0.4 - Remote PHP Script Code Injection source: https://www.securityfocus.com/bid/17061/info txtForum is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attacks are...
Easy File Sharing Web Server Multiple Vulnerablilities
Easy File Sharing Web Server Multiple Vulnerablilities Software: Easy File Sharing Web Server Version: 3.2 Website: http://www.sharing-file.com/ Description: Easy File Sharing Web Server is a Windows program that allows you to host a secure peer-to-peer and web-based file sharing system without a...
JVN#27365476 Minnu's filer2 vulnerable in allowing arbitrary Ruby script execution
Impact An attacker could take over a user's account, steal the user's information or delete it, or exploit the resources available to the user. In particular, if the Minnu's filer2 is run with the administrative privilege, an attacker could take over the entire system. Solution Products Affected...
[SA16902] PHPLIB Unspecified Code Execution Vulnerability
TITLE: PHPLIB Unspecified Code Execution Vulnerability SECUNIA ADVISORY ID: SA16902 VERIFY ADVISORY: http://secunia.com/advisories/16902/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PHPLIB 7.x http://secunia.com/product/8300/ DESCRIPTION: A vulnerability has been...
[SA18828] SSH Tectia Server SFTP Service Unspecified Vulnerability
TITLE: SSH Tectia Server SFTP Service Unspecified Vulnerability SECUNIA ADVISORY ID: SA18828 VERIFY ADVISORY: http://secunia.com/advisories/18828/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: SSH Secure Shell for Servers 3.x http://secunia.com/product/808/ SSH...
Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows
====================================================================== Secunia Research 10/02/2006 - Lotus Notes HTML Speed Reader Link Buffer Overflows - ====================================================================== Table of Contents Affected...
Farsinews 2.1 - Loginout.php Remote File Inclusion
Farsinews 2.1 - Loginout.php Remote File Inclusion source: https://www.securityfocus.com/bid/16440/info FarsiNews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...
PmWiki 2.1 - Multiple Input Validation Vulnerabilities
PmWiki 2.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include...
[SA18550] FileCOPA FTP Server Directory Traversal Vulnerability
TITLE: FileCOPA FTP Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA18550 VERIFY ADVISORY: http://secunia.com/advisories/18550/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:228)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
Ubuntu 4.10 : samba vulnerability (USN-29-1)
During an audit of the Samba 3.x code base Stefan Esser discovered a Unicode file name buffer overflow within the handling of TRANSACT2QFILEPATHINFO replies. A malicious samba user with write access to a share could exploit this by creating specially crafted path names files with very long names...
Farmers WIFE 4.4 sp1 - FTP Remote System Access
Farmers WIFE 4.4 sp1 - FTP Remote System Access !/usr/bin/perl kokanin 20060106 // farmers wife server 4.4 sp1 allows us to use ../../../ patterns as long as we stand in a folder where we have write access. haha, that's what you get for implementing your own access control instead of relying on t...
[SA18450] Light Weight Calendar "date" PHP Code Execution Vulnerability
TITLE: Light Weight Calendar "date" PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA18450 VERIFY ADVISORY: http://secunia.com/advisories/18450/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Light Weight Calendar 1.x http://secunia.com/product/6810/...
A springboard for attack and Defense-bug warning-the black bar safety net
Hackers in the attack will borrow from other systems to their own purposes, such as for the next target of the attack and occupied the computer itself use, and so on. This article describes the common hacker to the usurped computer use and Security Administrator to the appropriate response method...