Fedora Core 6 : kernel-2.6.18-1.2868.fc6 (2006-1471)

This update rebases to 2.6.18.6rc2, which fixes the following security bugs : bridge: fix possible overflow in getfdbentries CVE-2006-5751 Bluetooth: Add packet size checks for CAPI messages CVE-2006-6106 In addition, a number of non-security related bugs have been fixed. Complete changelogs are...

RHEL 2.1 : kernel (RHSA-2007:0013)

Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 32 bit architectures This security advisory has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles the...

CentOS 3 / 4 : seamonkey (CESA-2006:0759)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

bugs for Endonesia8.4

bugs for Endonesia8.4 FInd:z1ckXru mail:[email protected] 1 http://localhost/en/mod.php?mod=XSS&op=viewlink&cid=5 2 http://localhost/en/friend.php your Friend:XSS 3 http://localhost/en/admin.php Main Text: XSS 4 http://localhost/en/mod.php?mod=informasi&op=showinfo&intypeid=...

eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities

bugs for Endonesia8.4 FInd:z1ckXru mail:[email protected] 1 http://localhost/en/mod.php?mod=XSS&op=viewlink&cid=5 2 http://localhost/en/friend.php your Friend:XSS 3 http://localhost/en/admin.php Main Text: XSS 4 http://localhost/en/mod.php?mod=informasi&op=showinfo&intypeid=...

MS06-057 Microsoft Internet Explorer WebViewFolderIcon setSlice() Overflow

This module exploits a flaw in the WebViewFolderIcon ActiveX control included with Windows 2000, Windows XP, and Windows 2003. This flaw was published during the Month of Browser Bugs project MoBB 18. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2006-6600

Cross-site scripting XSS vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

Multiple bugs in TFT-Gallery

Script Name: TFT-Gallery Authors: Mike Scalora, Eric Thelin, Sascha Lorenz & Jan Berndt Website: http://tftgallery.sourceforge.net Bug Report: NetJackal njAThackerzDOTir & nima501ATyahooDOTcom Status: Patch not released First i should apologize for my bad english. Intro: TFT-Gallery is a PHP-base...

kapda-450.txt

Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...

[KAPDA]::Security analysis of cutenews 1.4.5

Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...

RHEL 4 : firefox (RHSA-2006:0733)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2006:0734)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

propsiteman.txt

vendor site:http://www.mginternet.com/ product:Property Site Manager bug:injection sql ,login bypass , xss risk:medium login bypass : just login with : user: 'or''=' passwd: 'or''=' injection sql : http://site.com/asp/detail.asp?l=&p='sql http://site.com/asp/listings.asp?l='sql...

Crashes with evidence of memory corruption (rv:1.8.0.8) — Mozilla

As part of the Firefox 1.5.0.8 release we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that at least some of these could be exploited to run arbitrary code with enough effort...

ae2 (standart.inc.php) Remote File Include Vulnerability

No description provided by source. ae2 standart.inc.php Remote File Inclusion Download Source : http://ae.utbm.fr/equipeinfo/siteae-utbm-latest.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; standart.inc.php bugs ; requireonce$topdir...

MS Internet Explorer WebViewFolderIcon setSlice() Overflow E

No description provided by source. This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice Msf::Exploit::Remote include Exploit::Remote::HttpServer::Html def initializeinfo ...

Trawler Web CMS 1.8.1 - Multiple Remote File Inclusions

Trawler Web CMS 1.8.1 - Multiple Remote File Inclusions trawler = 1.8.1 Remote File Inclusion Download Source : http://harald-kampen.de/trawler1.8.1.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net exploit;...

phpMyConferences-8.0.2.txt

phpMyConferences = 8.0.2 Remote File Inclusion Download Source : http://sedre.loria.fr/phpMyConference/phpMyConferences8.0.2.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; menus.inc.php bugs ; include$lvcincludedir.'/menus-'.$view.'.inc.php';...

phpMyConferences <= 8.0.2 (menu.inc.php) File Include Vulnerability

No description provided by source. phpMyConferences = 8.0.2 Remote File Inclusion Download Source : http://sedre.loria.fr/phpMyConference/phpMyConferences8.0.2.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; menus.inc.php bugs ;...