Sun Java Reflection API security bypass vulnerabilities

Overview Multiple vulnerabilities in the Sun Java Reflection API may allow an untrusted Java applet to bypass security restrictions and execute arbitrary code. Description The Sun Java Reflection API allows Java classes to determine information about other Java classes, such as public methods...

[eVuln] PHP iCalendar File Inclusion Vulnerability

New eVuln Advisory: PHP iCalendar File Inclusion Vulnerability http://evuln.com/vulns/70/summary.html --------------------Summary---------------- eVuln ID: EV0070 Software: PHP iCalendar Sowtware's Web Site: http://phpicalendar.net/ Versions: 2.0.1 2.1 2.2 Critical Level: Dangerous Type: File...

[SA18762] Java Web Start Sandbox Security Bypass Vulnerability

TITLE: Java Web Start Sandbox Security Bypass Vulnerability SECUNIA ADVISORY ID: SA18762 VERIFY ADVISORY: http://secunia.com/advisories/18762/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Java Web Start 1.x http://secunia.com/product/1005/ Sun Java JDK 1.5.x...

[SA18718] MPlayer ASF File Parsing Integer Overflow Vulnerabilities

TITLE: MPlayer ASF File Parsing Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA18718 VERIFY ADVISORY: http://secunia.com/advisories/18718/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: MPlayer 1.x http://secunia.com/product/2255/ DESCRIPTION: AFI...

[SA18735] Gallery Unspecified Album Data Manipulation Vulnerability

TITLE: Gallery Unspecified Album Data Manipulation Vulnerability SECUNIA ADVISORY ID: SA18735 VERIFY ADVISORY: http://secunia.com/advisories/18735/ CRITICAL: Less critical IMPACT: Manipulation of data, System access WHERE: From remote SOFTWARE: Gallery 1.x http://secunia.com/product/1933/...

[SA18720] AgileBill ADOdb server.php Insecure Test Script Security Issue

TITLE: AgileBill ADOdb server.php Insecure Test Script Security Issue SECUNIA ADVISORY ID: SA18720 VERIFY ADVISORY: http://secunia.com/advisories/18720/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: AgileBill 1.x http://secunia.com/product/6224/...

evuln.MyQuiz.txt

New eVuln Advisory: MyQuiz Arbitrary Command Execution Vulnerability http://evuln.com/vulns/57/summary.html --------------------Summary---------------- Software: MyQuiz Sowtware's Web Site: http://www.corantodemo.net/ Versions: 1.01 Critical Level: Dangerous Type: Command Execution Class: Remote...

Authentication flaw

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool...

CVE-2006-0531

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool...

[eVuln] MyQuiz Arbitrary Command Execution Vulnerability

New eVuln Advisory: MyQuiz Arbitrary Command Execution Vulnerability http://evuln.com/vulns/57/summary.html --------------------Summary---------------- Software: MyQuiz Sowtware's Web Site: http://www.corantodemo.net/ Versions: 1.01 Critical Level: Dangerous Type: Command Execution Class: Remote...

[SA18700] Firefox Multiple Vulnerabilities

TITLE: Firefox Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18700 VERIFY ADVISORY: http://secunia.com/advisories/18700/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of system information, Exposure of sensitive information, System access WHERE: From remote...

Exchangepop3 v5 rcpt buffer overflow vulnerability

Author: securma massine [email protected] MorX Security Research Team http://www.morx.org Product info : EXchangepop3 is an email gateway connector that retrieves messages from Internet POP3 email accounts and delivers them to Exchange Server. Vulnerability Description: eXchangepop3 is vulnerable ...

[SA18654] libpng "png_set_strip_alpha()" Buffer Overflow Vulnerability

TITLE: libpng "pngsetstripalpha" Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA18654 VERIFY ADVISORY: http://secunia.com/advisories/18654/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: libpng 1.x http://secunia.com/product/3439/ DESCRIPTION: A...

[SA18677] Xpdf PDF Splash Image Handling Vulnerability

TITLE: Xpdf PDF Splash Image Handling Vulnerability SECUNIA ADVISORY ID: SA18677 VERIFY ADVISORY: http://secunia.com/advisories/18677/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Xpdf 3.x http://secunia.com/product/4128/ DESCRIPTION: Dirk Mueller has...

[SA18643] GIT "git-checkout-index" Symbolic Link Handling Buffer Overflow

TITLE: GIT "git-checkout-index" Symbolic Link Handling Buffer Overflow SECUNIA ADVISORY ID: SA18643 VERIFY ADVISORY: http://secunia.com/advisories/18643/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: GIT 1.x http://secunia.com/product/7172/ DESCRIPTION: A...

pixelpostXSS.txt

New eVuln Advisory: Pixelpost Photoblog XSS Vulnerability http://evuln.com/vulns/45/summary.html --------------------Summary---------------- Software: Pixelpost Photoblog Sowtware's Web Site: http://www.pixelpost.org/ Versions: 1.4.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remo...

[eVuln] Pixelpost Photoblog XSS Vulnerability

New eVuln Advisory: Pixelpost Photoblog XSS Vulnerability http://evuln.com/vulns/45/summary.html --------------------Summary---------------- Software: Pixelpost Photoblog Sowtware's Web Site: http://www.pixelpost.org/ Versions: 1.4.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remo...

geoBlog-MOD_1.0.txt

New eVuln Advisory: geoBlog SQL Injection Vulnerability http://evuln.com/vulns/33/summary/bt/ --------------------Summary---------------- Software: geoBlog Sowtware's Web Site: http://sourceforge.net/projects/bitdamaged/ Versions: MOD1.0 Critical Level: Dangerous Type: SQL Injection Class: Remote...

[eVuln] Text Rider Sensitive Information Disclosure

New eVuln Advisory: Text Rider Sensitive Information Disclosure http://evuln.com/vulns/46/summary.html --------------------Summary---------------- Software: Text Rider Sowtware's Web Site: http://robot.ir/blog/mollasadra/textrider/ Versions: 2.4 Critical Level: Dangerous Type: Sensitive Informati...

[SA18615] Sun StorEdge Enterprise Backup / Solstice Backup Vulnerabilities

TITLE: Sun StorEdge Enterprise Backup / Solstice Backup Vulnerabilities SECUNIA ADVISORY ID: SA18615 VERIFY ADVISORY: http://secunia.com/advisories/18615/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Sun StorEdge Enterprise Backup 7.x...