Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials a...

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a...

[DR001] AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full, up-to-date, text of this advisory is located at: http://remahl.se/david/vuln/001/. Title: AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability Date of discovery: 2005-02-13 Date of publication: 2005-04-16 Discovered by: David...

CVE-2005-0562

The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...

CVE-2005-0562

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...

iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability

Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability iDEFENSE Security Advisory 04.12.05 www.idefense.com/application/poi/display?id=229&type=vulnerabilities April 12, 2005 I. BACKGROUND Internet Explorer is a set of core technologies in Microsoft Windows operating...

[SA14851] Logics Software LOG-FT File Transfer Arbitrary File Disclosure

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Logics Software LOG-FT File Transfer Arbitrary File...

Logics Software LOG-FT - Arbitrary File Disclosure

Logics Software LOG-FT - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is...

Logics Software LOG-FT - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...

[SA14677] Sun Java System Application Server Cross-Site Scripting

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java System Application Server Cross-Site Scriptin...

HolaCMS 1.21.4.x Voting Module - Remote File Corruption

HolaCMS 1.21.4.x Voting Module - Remote File Corruption source: https://www.securityfocus.com/bid/12789/info HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This is due an input validation error that allows users to submit voting data to an...

Oracle MySQL Multiple Vulnerabilities

Binary data 2696.prm...

PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)

-------------------------------------------------------- - Multiple Remote Access Validation Vulnerabilities - With PE community software -------------------------------------------------------- Altrus::security.honour.ca Program name: PE Versions affected: unknown Vendors: Outstart Inc...

postnuke -- cross-site scripting (XSS) vulnerabilities

A cross-site scripting vulnerability is present in the PostNuke PHP content management system. By passing data injected through exploitable errors in input validation, an attacker can insert code which will run on the machine of anybody viewing the page. It is feasible that this attack could be...

[SA14373] ginp Directory Traversal Vulnerability

TITLE: ginp Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA14373 VERIFY ADVISORY: http://secunia.com/advisories/14373/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: ginp 0.x http://secunia.com/product/4566/ DESCRIPTION: A...

[SA13971] Xerox WorkCentre Pro PostScript Directory Traversal

TITLE: Xerox WorkCentre Pro PostScript Directory Traversal SECUNIA ADVISORY ID: SA13971 VERIFY ADVISORY: http://secunia.com/advisories/13971/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From local network OPERATING SYSTEM: Xerox WorkCentre Pro...

Squid < 2.5.STABLE8 DoS

Binary data 2520.prm...

Veritas NetBackup "bpjava-susvc" process contains an input validation error

Overview Veritas NetBackup Administrative Assistant interface may allow users to execute arbitrary commands with elevated privileges. Description The Veritas NetBackup Administrative Assistant interface bpjava-susvc contains an input validation vulnerability. According to Veritas Alert 271727 :Wh...

STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability

STG Security Advisory: SSA-20041209-13 UseModWiki XSS vulnerability Revision 1.0 Date Published: 2004-12-09 KST Last Update: 2004-12-09 Disclosed by SSR Team [email protected] Summary ======== UseModWiki is one of famous wiki web applications. It has a cross-site scripting vulnerability...