[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...

WTcom <= 0.2.4-alpha (torrents.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== WTcom Remote SQL Injection Every Username, Password and Email ---------------------------------- Author: sh1r081...

[SECURITY] [DSA 1142-1] New freeciv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1142-1 [email protected] http://www.debian.org/security/ Martin Schulze August 4th, 2006 http://www.debian.org/security/faq -...

Mambo Component Mam-Moodle alpha - Remote File Inclusion

Mambo Component Mam-Moodle alpha - Remote File Inclusion Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path...

Mam-Moodle Mambo Component alpha Remote Inclusion Vulnerability

No description provided by source. Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path:...

[SECURITY] [DSA 1110-1] New samba packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1110-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 16th, 2006 http://www.debian.org/security/faq -...

DSA-1111 kernel-source-2.6.8 - race condition

Bulletin has no description...

CVE-2006-3538

Multiple cross-site scripting XSS vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the 1 "Your name" field and 2 "Enter Prayer Request here" field...

CVE-2006-3538

CVE-2006-3538: Multiple XSS vulnerabilities in BeatificFaith Eprayer Alpha’s demo.php allow remote attackers to inject arbitrary script/HTML via the SRC attribute of a SCRIPT element in the fields “Your name” and “Enter Prayer Request here.” According to NVD, the CVSS v2 base score is 5.8 (Medium...

[SECURITY] [DSA 1107-1] New GnuPG packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1107-1 [email protected] http://www.debian.org/security/ Martin Schulze July 10th, 2006 http://www.debian.org/security/faq -...

eprayer.txt

Eprayer v.Alpha. Homepage: http://eprayer.sourceforge.net Affected files: input boxs of prayer request. User submitted data is not sanatized before being dynamically generated. Try putting the code below in as "Your name" Screenshots: http://www.youfucktard.com/xsp/eprayer1.jpg...

Mozilla Firefox: Multiple vulnerabilities

Background Mozilla Firefox is the next-generation web browser from the Mozilla project. Description A number of vulnerabilities were found and fixed in Mozilla Firefox. For details please consult the references below. Impact By enticing the user to visit a malicious website, a remote attacker can...

[SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1084-1 [email protected] http://www.debian.org/security/ Steve Kemp May 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 1080-1 [email protected] http://www.debian.org/security/ Steve Kemp May 29th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1074-1 [email protected] http://www.debian.org/security/ Martin Schulze May 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1073-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...

Non-Upper Encoder

Encodes payloads as non-alpha based bytes. This allows payloads to bypass tolower calls, but will fail isalpha. Table based design from Russel Sanford. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1052-1 [email protected] http://www.debian.org/security/ Martin Schulze May 8th, 2006 http://www.debian.org/security/faq -...

Mozilla Thunderbird: Multiple vulnerabilities

Background Mozilla Thunderbird is the next-generation mail client from the Mozilla project. Description Several vulnerabilities were found and fixed in Mozilla Thunderbird. Impact A remote attacker could craft malicious emails that would leverage these issues to inject and execute arbitrary scrip...

[SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1050-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...