Fedora 13 : GraphicsMagick-1.3.12-1.fc13 (2010-4127)

new release, with a handful of bug fixes filtering and security fix related to extended characters in filenames, see also, http://sourceforge.net/mailarchive /message.php?msgname=alpine.GSO.2.01.1002211622420.25017 at freddy.simplesystems.o rg Note that Tenable Network Security has extracted the...

Fedora 12 : konversation-1.2.3-1.fc12 (2010-1935)

Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...

Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...

Cross site scripting

Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...

CVE-2010-2228

Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...

CVE-2010-2228

Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...

Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)

Exploit for windows platform in category local exploits ========================================================== Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass ========================================================== !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Wi...

CVE-2010-2435

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...

Code injection

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...

CVE-2010-2435

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...

CVE-2010-2435

CVE-2010-2435 affects Weborf HTTP Server versions 0.12.1 and earlier. The vulnerability arises from how the server processes Unicode characters in HTTP headers (notably the Connection header), allowing remote attackers to trigger a crash and cause a denial of service. The available connected docu...

Weborf HTTP Server Denial of Service Vulnerability

Exploit for multiple platform in category dos / poc ================================================== Weborf HTTP Server Denial of Service Vulnerability ================================================== Software - Weborf HTTP Server Vendor Product Description - Weborf is a lightweight Web serve...

Weborf DCA-00012 Vulnerability Report

DCA-0012 Software - Weborf HTTP Server Vendor Product Description - Weborf is a lightweight Web server written in C. It supports IPv6 and basic authentication. It doesn't implement the full HTTP specification, but can be used to easily share directories or files. Bug Description - Weborf HTTP...

CVE-2009-4875

FCKeditor.Java 2.4 allows remote attackers to cause a denial of service infinite loop via a malformed request parameter that contains "ctrl" characters...

CVE-2009-4875

FCKeditor.Java 2.4 allows remote attackers to cause a denial of service infinite loop via a malformed request parameter that contains "ctrl" characters...

Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)

No description provided by source. Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1663 Author: Jordi Chancel Software Link: http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html...

Adobe - 'util.printf()' Local Buffer Overflow (Metasploit) (1)

$Id: adobeutilprintf.rb 9212 2010-05-03 17:13:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

[SECURITY] Fedora 13 Update: alienarena-7.33-2.fc13

Alien Arena 2009 is an online deathmatch game with over 30 levels, seven mo des of play, loads of mutators, built-in bots, multiple player characters and w eapons with alt-fire modes...

[SECURITY] Fedora 12 Update: alienarena-7.32-3.fc12.2

Alien Arena 2009 is an online deathmatch game with over 30 levels, seven mo des of play, loads of mutators, built-in bots, multiple player characters and w eapons with alt-fire modes...

CVE-2010-0296

The encodename macro in misc/mntentr.c in the GNU C Library aka glibc or libc6 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service mtab corruption, or possibly modify mount...