GLSA-200602-13 : GraphicsMagick: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200602-13 GraphicsMagick: Format string vulnerability The SetImageInfo function was found vulnerable to a format string mishandling. Daniel Kobras discovered that the handling of '%'-escaped sequences in filenames passed to the...

GLSA-200602-06 : ImageMagick: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200602-06 ImageMagick: Format string vulnerability The SetImageInfo function was found vulnerable to a format string mishandling. Daniel Kobras discovered that the handling of '%'-escaped sequences in filenames passed to the...

[UNIX] Linux Kernel "AIO" Local DoS (PPC64 and IA64 Architecture, Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Linux Kernel PPC64/IA64 (AIO) - Local Denial of Service

// // Proof of Concept by Daniel McNeil // compile using cc -o aiodioread aiodioread.c -laio // define XOPENSOURCE 600 define GNUSOURCE include include include include include include include include include include int pagesize; char iobuf; iocontextt myctx; int aiomaxio = 4; / do a AIO DIO writ...

invision203.txt

Invision Power Board v2.0.3 XSS vulnerabilities found more at user signature. when Admin read attacker topics, admin will lost his passhash example...

[SA14119] D-BUS Session Bus Hijack Vulnerability

TITLE: D-BUS Session Bus Hijack Vulnerability SECUNIA ADVISORY ID: SA14119 VERIFY ADVISORY: http://secunia.com/advisories/14119/ CRITICAL: Less critical IMPACT: Hijacking WHERE: Local system SOFTWARE: D-BUS 0.x http://secunia.com/product/4599/ DESCRIPTION: Daniel Reed has reported a vulnerability...

CVE-2002-1523

The CVE-2002-1523 entry concerns the Daniel Arenz Mini Server 2.1.6. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files via ../ or ..\ sequences. This is caused by improper handling of relative path traversal in the server, leading to potential exposur...

CVE-2002-1523: Undefined Security Weakness

Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via 1 ../ dot-dot slash or 2 ..\ dot-dot backslash sequences...

Directory traversal in Daniel Arenz' Mini Server

Hi! There is a directory traversal flaw in Daniel Arenz' Mini Server 2.1.6 tested on Windows XP Professional. It could be that prior versions are also affected. It's possible to show every by the web server readable file on the target system by using one of the following URLs:...