Unfixed XSS vulnerability at www.jockersoft.com

Security researcher Andrew MacFie, has submitted on 08/12/2007 a cross-site-scripting XSS vulnerability affecting www.jockersoft.com, which at the time of submission ranked 137110 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It i...

Unfixed Redirect vulnerability at forums.heavengames.com

Security researcher Andrew MacFie, has submitted on 05/10/2007 a Redirect vulnerability affecting forums.heavengames.com, which at the time of submission ranked 16671 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is currently...

Unfixed XSS vulnerability at www.teamtet.com

Security researcher Andrew MacFie, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.teamtet.com, which at the time of submission ranked 4356265 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

CVE-2006-2633

The CVE-2006-2633 entry describes an absolute path traversal in ByteHoard 2.1 and earlier, where the copy action in index.php can be exploited by remote authenticated users to create or overwrite files in other users’ directories by supplying the absolute directory path in infolder and the filena...

CVE-2006-2632

CVE-2006-2632 is an XSS vulnerability in Andrew Godwin ByteHoard 2.1 and earlier. The issue allows remote authenticated users to inject arbitrary web script or HTML via file descriptions. The connected documents confirm the affected software/component and the root cause (client-side script inject...

[SA19589] Debian mnogosearch Insecure Password Storage Security Issue

TITLE: Debian mnogosearch Insecure Password Storage Security Issue SECUNIA ADVISORY ID: SA19589 VERIFY ADVISORY: http://secunia.com/advisories/19589/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: Local system OPERATING SYSTEM: Debian GNU/Linux 3.1...

GLSA-200506-23 : Clam AntiVirus: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-23 Clam AntiVirus: Denial of Service vulnerability Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack. Impact ...

[SECURITY] [DSA 698-1] New mc packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 698-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...

DSA-698-1 mc - buffer overflow

Bulletin has no description...

[SA13236] ClickandBuild Constructed Store "listPos" Cross-Site Scripting Vulnerability

TITLE: ClickandBuild Constructed Store "listPos" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13236 VERIFY ADVISORY: http://secunia.com/advisories/13236/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ClickandBuild http://secunia.com/product/4279/...

Important: Red Hat Security Advisory: mc security update

Updated mc packages that resolve several buffer overflow vulnerabilities, one format string vulnerability and several temporary file creation vulnerabilities are now available. Midnight Commander mc is a visual shell much like a file manager. Several buffer overflows, several temporary file...

Coda RPC2 Denial of Serviec

,'| .-''-.....--'; / '. ..-' , ,--...--''' .--''' /' -';' ; ; ; ...--'' ...--..' .;.' fL ,....----''' ,..--'' felinemenace.org Program: Coda 6.0.1 and probably below Impact: Denial of service of all programs using RPC2 Discovered: Andrew Griffiths 1 Background Coda is an advanced network filesyst...

RedHat 6.2 /usr/bin/rcp - 'SUID' Local Privilege Escalation

!/usr/bin/perl -w exploits suid privledges on rcp Not really tested this but hey works on redhat6.2 not werk on freebsd4.1 stable bug discovered by Andrew Griffiths Exploit written by tlabs greetz to those that know me innit Please set your rcpfile this can be found by doing ls -alF which rcp hav...

rpc Suid Privledge Exploit

Exploit for linux platform in category local exploits ========================== rpc Suid Privledge Exploit ========================== !/usr/bin/perl -w exploits suid privledges on rcp Not really tested this but hey works on redhat6.2 not werk on freebsd4.1 stable bug discovered by Andrew Griffit...

Re: possible bug in rcp...

On Wed, Nov 22, 2000 at 09:11:20AM +1100, Andrew Griffiths wrote: Here is a possible bug in rcp; since I think it calls system. I haven't had much time to play with this, because exama are coming up. It is negated because system calls /bin/cp which with the newer versions of bash, it drops it's...

Andrew Lewis

The Problem: ------------ Many admins who use Proxy+ configure the remote administration port which works over HTTP to only accept connections from the localhost. Fortunately enough, the admin port doesn't allow connections which have been bounced through the HTTP proxy. The telnet proxy, on the...

MDMA Advisory #5: Reading of CGI Scripts under Savant Webserver

MDMA Advisory 5 by Andrew Lewis aka. Wizdumb Reading of CGI Scripts under Savant Webserver It is possible to view the source of CGI scripts running under the Savant Webserver by omitting the HTTP version from your request. For example, we connect to port 80 of the server and type "GET...