5908 matches found
[SA15819] NateOn Messenger Directory Listing Disclosure Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[SA15864] Comdev News Publisher Cross-Site Scripting and PHP Code Execution
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
phpbb -- remote PHP code execution vulnerability
FrSIRT Advisory reports: A vulnerability was identified in phpBB, which may be exploited by attackers to compromise a vulnerable web server. This flaw is due to an input validation error in the "viewtopic.php" script that does not properly filter the "highlight" parameter before calling the...
[Full-disclosure] iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability
Multiple Vendor Cacti configsettings.php Remote Code Execution Vulnerability iDEFENSE Security Advisory 06.22.05 www.idefense.com/application/poi/display?id=266&type=vulnerabilities June 22, 2005 I. BACKGROUND Cacti is a round-robin database RRD tool that helps create graphs from database...
GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access
GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue...
GeoVision Digital Surveillance System 6.0 4/6.1 - Unauthorized '.JPEG' Image Access
source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue results from an access validation error. GeoVision Digital Surveillance System versio...
[Full-disclosure] Easy Message Board Directory Traversal and Remote Command
============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...
Easy Message Board Directory Traversal and Remote Command
============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials a...
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a...
[DR001] AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full, up-to-date, text of this advisory is located at: http://remahl.se/david/vuln/001/. Title: AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability Date of discovery: 2005-02-13 Date of publication: 2005-04-16 Discovered by: David...
CVE-2005-0562
The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...
CVE-2005-0562
GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...
iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability
Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability iDEFENSE Security Advisory 04.12.05 www.idefense.com/application/poi/display?id=229&type=vulnerabilities April 12, 2005 I. BACKGROUND Internet Explorer is a set of core technologies in Microsoft Windows operating...
[SA14851] Logics Software LOG-FT File Transfer Arbitrary File Disclosure
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Logics Software LOG-FT File Transfer Arbitrary File...
Logics Software LOG-FT - Arbitrary File Disclosure
Logics Software LOG-FT - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is...
Logics Software LOG-FT - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...
[SA14677] Sun Java System Application Server Cross-Site Scripting
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java System Application Server Cross-Site Scriptin...
HolaCMS 1.21.4.x Voting Module - Remote File Corruption
HolaCMS 1.21.4.x Voting Module - Remote File Corruption source: https://www.securityfocus.com/bid/12789/info HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This is due an input validation error that allows users to submit voting data to an...
