space4k-xss.txt

Application: Space4k Web Site: http://www.space4k.pl|fr|com|de|it Bug: XSS Cross site Scripting Discoverer: Florian Stinglmayr Date: 2007-06-07 ---------------------------------------------------------------------- Description: ============ Space4K is a massive multiplayer online game game which...

n.runs-SA-2007.012 - Avira Antivir Antivirus TAR Denial of Service

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.012 30-May-2007 Vendor: Avira GmbH, http://www.avira.com Affected Product: Avira Antivir Antivirus Vulnerability: Infinity Loop DoS remote Risk: HIGH Vendor communication: 2007/05/07 initial notification to Avira GmbH 2007/05/07...

[Full-disclosure] n.runs-SA-2007.010 - Avira Antivir Antivirus LZH parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.010 28-May-2007 Vendor: Avira GmbH, http://www.avira.com Affected Product: Avira Antivir Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07 initial notification to Avira GmbH...

n.runs-SA-2007.009 - Avast! Antivirus SIS parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.009 25-May-2007 Vendor: ALWIL Software a.s., http://www.avast.com Affected Product: avast! antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07 initial notification to ALWIL Software...

Cisco CallManager 4.1 Input Validation Vulnerability

Cisco CallManager 4.1 Input Validation Vulnerability scip AG Vulnerability ID 2977 03/13/2007 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2977 I. INTRODUCTION Cisco CallManager, short CCM, is a professional voice-over-IP solution that tracks active components, including among others phones,...

n.runs-SA-2007.008 - Avast! Antivirus CAB parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.008 24-May-2007 Vendor: ALWIL Software a.s., http://www.avast.com Affected Product: avast! antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07 initial notification to ALWIL Software...

n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.007 18-Apr-2007 Vendor: Sun Microsystems, Inc., http://www.sun.com Affected Products: Solaris 10, Java Web Console 2.2.2 - 2.2.5 Vulnerability: Format string vulnerability Risk: HIGH CVE ID: CVE-2007-1681 Sun Alert ID: 102854 SU...

n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.003 14-Mar-2007 Vendor: Mayflower GmbH, http://www.mayflower.de Affected Products: PHProjekt 5.2.0 Vulnerability: SQL Injection Risk: HIGH Vendor communication: 2006/12/31 initial notification of Mayflower 2007/01/02 Mayflower...

n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.006 14-Mar-2007 Vendor: Mayflower GmbH, http://www.mayflower.de Affected Products: PHProjekt 5.2.0 Vulnerability: Privilege escalation Risk: HIGH Vendor communication: 2006/12/31 initial notification of Mayflower 2007/01/02...

Linux Omnikey Cardman 4040 driver Local Buffer Overflow Exploit PoC

No description provided by source. / Linux Omnikey Cardman 4040 driver buffer overflow CVE-2007-0005 Copyright C Daniel Roethlisberger [email protected] Compass Security Network Computing AG, Rapperswil, Switzerland. All rights reserved. http://www.csnc.ch/ / includesys/stat.h...

Linux Omnikey Cardman 4040 driver Local Buffer Overflow Exploit PoC

Exploit for linux platform in category dos / poc =================================================================== Linux Omnikey Cardman 4040 driver Local Buffer Overflow Exploit PoC =================================================================== / Linux Omnikey Cardman 4040 driver buffer...

ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities scip AG Vulnerability ID 2893 12/22/2006 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893 I. INTRODUCTION ePortfolio is a e-banking application by TKS Banking Solutions. More...

[Full-disclosure] Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.001 8-Feb-2007 Vendor: Aruba Networks, http://www.arubanetworks.com Affected Products: Aruba Mobility Controllers 200, 600, 2400, 6000 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 Vulnerability: Unauthorized Administrative a...

[Full-disclosure] NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.005 21-Dec-2006 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2006/08/24 initial notification of ESET 2006/08/28 ESET Respon...

[Full-disclosure] NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.004 20-Dec-2006 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2006/08/24 initial notification of ESET 2006/08/28 ESET Respon...

comdev41.txt

Comdev One Admin Pro.v4.1 pathskin Remote File include Found by : AG-Spider C0ntAct : AG-Spider at msn dot com Affected Software : One Admin Pro.v4.1 Download Script : http://www.conovo.de/script/OneAdminPro.v4.1.zip KaBaRa.HaCk.eGy KILLERxXx CRASHOVERRIDE SwEEt-deVil Young Hacker Arab Security...

[Full-disclosure] AVG Anti-Virus - Arbitrary Code Execution (remote)

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.002 13-Nov-2006 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Arbitrary Code Execution remote Vendor communication: 2006/08/24 initial notification to Grisoft Inc. 2006/08/24 Grisoft Inc. Respon...

PhotoPostPHP4.6-4.5.txt

PhotoPost PHP 4.6 - 4.5 PPPATH Remote File Include Vulnerability Found by ..........: AG-Spider our Web Site : ---- http://www.ArabAttack.com Arab Attack Security Team Affected Software .: PhotoPost PHP Vendor ............: http://www.popphoto.com Risk & Class...: high-Remote File Inclusion C0ntA...

CVE-2006-4491

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.21.5, AG Pocket before 5.20.8, Mailwise before 3.00.3, and Garoon 1 before 1.54.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2006-4491

Summary: Cybozu products (Collaborex, AG before 1.2(1.5); AG Pocket before 5.2(0.8); Mailwise before 3.0(0.3); Garoon 1 before 1.5(4.1)) are vulnerable to a directory traversal flaw that allows remote authenticated users to read arbitrary files via unspecified vectors. Impact: partial confidentia...