[SA15819] NateOn Messenger Directory Listing Disclosure Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

phpbb -- remote PHP code execution vulnerability

FrSIRT Advisory reports: A vulnerability was identified in phpBB, which may be exploited by attackers to compromise a vulnerable web server. This flaw is due to an input validation error in the "viewtopic.php" script that does not properly filter the "highlight" parameter before calling the...

[Full-disclosure] iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability

Multiple Vendor Cacti configsettings.php Remote Code Execution Vulnerability iDEFENSE Security Advisory 06.22.05 www.idefense.com/application/poi/display?id=266&type=vulnerabilities June 22, 2005 I. BACKGROUND Cacti is a round-robin database RRD tool that helps create graphs from database...

GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access

GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue...

GeoVision Digital Surveillance System 6.0 4/6.1 - Unauthorized '.JPEG' Image Access

source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue results from an access validation error. GeoVision Digital Surveillance System versio...

[Full-disclosure] Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials a...

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a...

[DR001] AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full, up-to-date, text of this advisory is located at: http://remahl.se/david/vuln/001/. Title: AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability Date of discovery: 2005-02-13 Date of publication: 2005-04-16 Discovered by: David...

CVE-2005-0562

The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...

CVE-2005-0562

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...

iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability

Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability iDEFENSE Security Advisory 04.12.05 www.idefense.com/application/poi/display?id=229&type=vulnerabilities April 12, 2005 I. BACKGROUND Internet Explorer is a set of core technologies in Microsoft Windows operating...

[SA14851] Logics Software LOG-FT File Transfer Arbitrary File Disclosure

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Logics Software LOG-FT File Transfer Arbitrary File...

Logics Software LOG-FT - Arbitrary File Disclosure

Logics Software LOG-FT - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is...

Logics Software LOG-FT - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...

[SA14677] Sun Java System Application Server Cross-Site Scripting

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java System Application Server Cross-Site Scriptin...

HolaCMS 1.21.4.x Voting Module - Remote File Corruption

HolaCMS 1.21.4.x Voting Module - Remote File Corruption source: https://www.securityfocus.com/bid/12789/info HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This is due an input validation error that allows users to submit voting data to an...

Oracle MySQL Multiple Vulnerabilities

Binary data 2696.prm...

PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)

-------------------------------------------------------- - Multiple Remote Access Validation Vulnerabilities - With PE community software -------------------------------------------------------- Altrus::security.honour.ca Program name: PE Versions affected: unknown Vendors: Outstart Inc...