[SA13074] FsPHPGallery Denial of Service and Disclosure of System Information Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA13074] FsPHPGallery Denial of Service and Disclosure of System Information Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA12862] ClientExec Exposure of Sensitive Information

TITLE: ClientExec Exposure of Sensitive Information SECUNIA ADVISORY ID: SA12862 VERIFY ADVISORY: http://secunia.com/advisories/12862/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: ClientExec 2.x http://secunia.com/product/4074/ DESCRIPTION: A security...

Multiple Safari bugs

Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of system information, Exposure of sensitive information, Privilege escalation, DoS, System access...

[SA12439] TorrentTrader "id" SQL Injection Vulnerability

TITLE: TorrentTrader "id" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA12439 VERIFY ADVISORY: http://secunia.com/advisories/12439/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information, Manipulation of data WHERE: From remote SOFTWARE:...

Terminal Services Web Detection

Binary data 2508.prm...

Sysinfo Detection

Binary data 3517.prm...

serenaTeam.txt

Serena Software's TeamTrack Sensitive Content Disclosure Summary "Serena TeamTrack is a Web-architected, secure and highly configurable enterprise process management solution". We have discovered a security flaw with which a remote attacker can disclosure sensitive information off a TeamTrack...

CVE-2004-0177

The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw devic...

Terminal Services Web Detection

The remote host appears to be configured to facilitate the client download of an ActiveX Terminal Services Client. So, users can access the web page and click a 'connect' button which will prompt a client-side download of a .cab file which will be used to connect the client directly to a terminal...

Buffer overflows and format string vulnerabilities in LCDproc

Background LCDproc is a program that displays various bits of real-time system information on an LCD. It makes use of a local server LCDd to collect information to display on the LCD. Description Due to insufficient checking of client-supplied data, the LCDd server is susceptible to two buffer...

Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure

Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure source: https://www.securityfocus.com/bid/10175/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote...

PSR - #2004-002 Remote - LCDProc

Priv8 Security Research - 2004-001 [email protected] http://www.priv8security.com Adriano Lima February 22nd, 2004 --------------------------------------------------------------------------- Package Name: LCDProc Vendor URL: http://lcdproc.omnipotent.net Date: 2004-02-22 ID: PSR-2004-002...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to properly validate information access credentials. Successful...

Novell NetBasic Scripting Server Encoded Traversal Arbitrary File Access

Novell Netbasic Scripting Server Directory Traversal It is possible to escape out of the root directory of the scripting server by substituting a forward or backward slash for %5C. As a result, system information, such as environment and user information, could be obtained from the NetWare server...

Novonyx Web Server Multiple Sample Application Files Present

Novell NetWare default Novonyx web server files. A default installation of Novell 5.x will install the Novonyx web server. Numerous web server files included with this installation could reveal system information. This script was written by David Kyger See the Nessus Scripts License for details...

[SECURITY] [DSA-346-1] New phpsysinfo packages fix directory traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 346-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

SCSA012.txt

Security Corporation Security Advisory SCSA-012 PROGRAM: Sambar Server HOMEPAGE: http://www.sambar.com/ VULNERABLE VERSIONS: 5.3 and prior DESCRIPTION "Sambar Server is the new standard in high performance multi-functional servers with features rivaling other commercial products selling separatel...

ScozBook 1.1 - Full Path Disclosure

source: https://www.securityfocus.com/bid/7236/info A path disclosure vulnerability has been reported for ScozBook. The issue occurs when a request is made to the view.php script page. Access to sensitive filesystem information may aid an attacker in launching further attacks against a target...