KLA10271 SB vulnerability in NetSupport Manager Client

An unspecified vulnerability was found in NetSupport Manager Client. By exploiting this vulnerability malicious users can bypass auth schemes. This vulnerability can be exploited remotely via spoofing UI. Original advisories - Exploitation Related products NetSupport-Manager CVE list CVE-2007-505...

KLA10268 Multiple vulnerabilities in ESET NOD32

Multiple serious vulnerabilities have been found in ESET NOD32. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Division by zero can be exploited remotely via a specially designed packet 2. An...

KLA10247 Vulnerability in MailMArshal SMTP

An unspecified vulnerability was found in MailMarshal SMTP. By exploiting this vulnerability malicious users can modify arbitrary account information. This vulnerability can be exploited remotely via a specially designed UserId variable. Original advisories - Exploitation Related products...

KLA10093 Multiple vulnerabilities in CA software

Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via specially designed RPC...

PT-2007-1370 · Mambo · Mambo Laithai

Name of the Vulnerable Software and Affected Versions: Mambo LaiThai versions 4.5.4 SP2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the usercookiepassword cookie parameter. Recommendations: For Mambo LaiThai versions 4.5.4 SP2...

PT-2006-7313 · Sugarcrm · Sugarcrm Open Source

Name of the Vulnerable Software and Affected Versions: SugarCRM Open Source versions 4.5.0f and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages. Recommendations: For SugarCRM Ope...

Solaris 2.5.1 (sparc) : 106830-01

The remote host is missing Sun Security Patch number 106830-01 Netra-j 2.1: make ssl module work as client, domestic US only. Date this patch was last updated by Sun : Tue Jan 12 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

PhotoPost <= 4.6 (PP_PATH) Remote File Include Vulnerability

No description provided by source. ==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

PhotoPost 4.6 - 'PP_PATH' Remote File Inclusion

==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

DRUPAL-SA-2006-015: Multiple vulnerabilities in Bibliography

Unescaped input is used directly in queries, allowing malicious users to execute SQL injection attacks. This may result in administrator access. It is also possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to...

Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit

No description provided by source. ?php / Name : Webmin / Usermin Arbitrary File Disclosure Vulnerability Date : 2006-06-30 Patch : update to version 1.290 Advisory : http://securitydot.net/vuln/exploits/vulnerabilities/articles/17885/vuln.html Coded by joffer , http://securitydot.net / $host =...

KLA10398 Vulnerability in NetMeeting

An unspecified vulnerability was found in Microsoft NetMeeting. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed input. Original advisories - Exploitation Related...

[SA20431] TIBCO Hawk "tibhawkhma" Privilege Escalation Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

Exploit for unknown platform in category web applications =================================================== Nukedit CMS Kapda HTML PoC For Nukedit Kapda HTML PoC For Nukedit Discovered and coded by 3nitro - farhadkey AT kapda dot ir Change the form's action in source :...

[SA19875] Kerio MailServer Attachment Filter Bypass Vulnerability

TITLE: Kerio MailServer Attachment Filter Bypass Vulnerability SECUNIA ADVISORY ID: SA19875 VERIFY ADVISORY: http://secunia.com/advisories/19875/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Kerio MailServer 6.x http://secunia.com/product/3782/ DESCRIPTION: A...

KLA10086 CI vulnerability in Avant Browser

An unspecified vulnerability was found in the Avant browser. By exploiting this vulnerability malicious users can inject command line arguments. This vulnerability can be exploited remotely with user assistance via a specially designed ‘mailto:’ link. Original advisories - Exploitation Related...

PT-2006-1525 · Gnu · Flex

Name of the Vulnerable Software and Affected Versions: flex versions prior to 2.5.33 Description: The issue is related to the allocation of memory for grammars containing REJECT statements or trailing context rules. This causes the generation of code that contains a buffer overflow, which might...

[SA18949] PHP-Fusion Cross-Site Scripting Vulnerabilities

TITLE: PHP-Fusion Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA18949 VERIFY ADVISORY: http://secunia.com/advisories/18949/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Unknown WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291/ PHP-Fusion 5.x...

KLA10267 ACE vulnerability in NJStar Word Processor

A buffer overflow was found in NJStar Word Processor. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via NJX documents. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

[SA18846] Libapreq2 Unspecified Vulnerability

TITLE: Libapreq2 Unspecified Vulnerability SECUNIA ADVISORY ID: SA18846 VERIFY ADVISORY: http://secunia.com/advisories/18846/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Libapreq2 2.x http://secunia.com/product/8138/ DESCRIPTION: A vulnerability has been reported in Libapreq2...