CYBSEC-SAPBC2.txt

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryArbitraryFileReadorDeleteinSAPBC.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Arbitrary File Read/Delete in SAP BC Business Connector Vulnerability Class: Improper Input...

Winamp < 3.0b Multiple File Handling DoS

The remote host is using Winamp3, a popular media player which handles many files format mp3, wavs and more... This version suffers from multiple buffer overflow and denial of service issues that can be triggered by specially crafted b4s files. To perform an attack, the attack would have to send ...

Vulnerability found: Adobe Acrobat eBook Reader and Content Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 Product Vulnerability Reporting Form CONTACT INFORMATION =============================================================================== Name : Vladimir Katalov E-mail : [email protected] Phone / fax : +7 095 216-7937 +1 866 448-2703 fax; US, toll-fre...

Bytes interactive Web shopper 1.02.0 - Directory Traversal

Bytes interactive Web shopper 1.02.0 - Directory Traversal source: https://www.securityfocus.com/bid/1776/info Bytes Interactive Web Shopper is a XML based shopping cart application. The "newpage" variable does not properly check for insecure relative paths such as the double dot "..". The...

Bytes interactive Web shopper 1.0/2.0 - Directory Traversal

source: https://www.securityfocus.com/bid/1776/info Bytes Interactive Web Shopper is a XML based shopping cart application. The "newpage" variable does not properly check for insecure relative paths such as the double dot "..". The following URL request:...