CVE-2007-1850

CVE-2007-1850 concerns Drake CMS. A directory traversal vulnerability exists in the file path components/classes/captcha/captcha.jpg.php, exploitable via the d_private parameter with a .. sequence to read arbitrary files, list directories, and reveal the installation path. Reported effects includ...

Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin

Rapid7 Advisory R7-0026 HTTP Header Injection Vulnerabilities in the Flash Player Plugin Published: Oct 17, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0026.jsp 1. Affected Systems: KNOWN VULNERABLE: o Flash Player plugin 9.0.16 for Windows o Flash Player plugin 7.0.63 for Linux PROBAB...

NVIDIA Display Driver for Unix systems vulnerable to buffer overflow

Overview A vulnerability in the NVIDIA Display Driver for Unix systems may allow a remote attacker to execute code on a vulnerable system. Description The NVIDIA Display Driver for Unix systems provides access to the display adapter's accelerated features on supported systems, and includes a modu...

PT-2006-5833 · Myphotos · Myphotos

Name of the Vulnerable Software and Affected Versions: MyPhotos version 0.1.3b beta Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via the includesdir parameter. Recommendations: For MyPhotos version 0.1.3b beta, as a temporary...

PT-2006-4420 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7.0 Beta Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a web page containing multiple empty APPLET start tags. A third party has dispute...

Web Host Automation Ltd. Helm 3.2.10 Beta - domains.asp?txtDomainName Cross-Site Scripting

Web Host Automation Ltd. Helm 3.2.10 Beta - domains.asp?txtDomainName Cross-Site Scripting source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

Web Host Automation Ltd. Helm 3.2.10 Beta - 'domains.asp?txtDomainName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

Web Host Automation Ltd. Helm 3.2.10 Beta - default.asp Multiple Cross-Site Scripting Vulnerabilities

Web Host Automation Ltd. Helm 3.2.10 Beta - default.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Web Host Automation Ltd. Helm 3.2.10 Beta - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)

No description provided by source. / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" [email protected] .SP dSSP' sSSSSSSP http://spaces.msn.com/members/berendjanwever iS: Thi...

CMSimple < 2.4 Beta 5 Multiple Remote Input Validation Vulnerabilities

Binary data 2544.prm...

[waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta]

================================================================================ waraxe-2004-SA012 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium SP3 and 1.9 Nexus Beta...

vBulletin 3.0 - Private Message HTML Injection

source: https://www.securityfocus.com/bid/7594/info A vulnerability has been reported in vBulletin 3.0.0 beta 2. The problem is said to occur due to insufficient sanitization of private messages. As a result, an attacker may be capable of embedding malicious HTML or script code within a private...

AIM including the beta 4.8.2646 Local/Remote Buffer Oveflow

.--------. / Bugs +-----------------------------------------------------------------------. : Affected : All versions of AIM including the beta 4.8.2646 : Type : Local/Remote Buffer Oveflow : Date : 29-02-2002 : Author : NtWaK0 & Recon @ www.SafeHack.com :...

AOL Instant Messenger vulnerable to buffer overflow via long filename

Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM permits users to send files from one peer to another. By sending a file with a long name, it is possible to crash th...

[Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released.

mutt-1.2.5.1 and mutt-1.3.25 have just been released. These releases both fix a security hole which can be remotely exploited. The problem was found and a fix suggested by Joost Pol [email protected]. Thanks for that. mutt-1.2.5.1 is released as an update to the last stable version of mutt,...

Formatting string bug on cyrus-sasl library

This issue may be already have been on list. I assume that the moderator this case rejects this mail. On last non-beta version of cyrus-sasl library have formatting string bug on default logging callback. Default cyrys sasl logging callback is static int saslsyslogvoid context attributeunused, in...

Linux news 29.09.00

Linux 2.2.18pre11 Alax Cox выпустил новую pre-версию следующего стабильного ядра Linux: 2.2.18pre11. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-09-27-011-04-NW-KN MySQL 3.23.25 Вышла новая beta версия популярного SQL сервера MySQL - MySQL 3.23.25. Подробнее:...

Linux news 7.07.00

Linux Kernel pre-patch 2.4.0 test3-pre3 Вышел третий пререлиз третьего тестового ядра Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Kernel traffic 74 Вышел очередной номер отличного сборника писем с комментариями из списка рассылки ядра Linux. На этот раз там можно...

Linux news 6.04.00

Обновлен список работ для 2.4 Alan обновил список работ, которые необходимо выполнить для ядра 2.4. Подробнее: http://www.linuxtoday.org/stories/19479.html Kernel Traffic 61 Вышел очередной Kernel Traffic, за номером 61. Подробнее: http://www.linuxtoday.com McAfee VirusScan for Linux...