[SECURITY] Fedora 10 Update: rb_libtorrent-0.13.1-5.fc10

rblibtorrent is a C++ library that aims to be a good alternative to all the other BitTorrent implementations around. It is a library and not a full featured client, although it comes with a few working example clients. Its main goals are to be very efficient in terms of CPU and memory usage as we...

[InterN0T] transLucid 1.75 - Multiple Vulnerabilities

transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a growing list of ready-made, professional...

Scriptsez Easy Image Downloader - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35701/info Easy Image Downloader is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Translucid 1.75 XSS / HTML Injection

transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a growing list of ready-made, professional...

TransLucid 1.75 - Multiple Vulnerabilities

TransLucid 1.75 - Multiple Vulnerabilities transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a...

TransLucid 1.75 - Multiple Vulnerabilities

transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a growing list of ready-made, professional...

XM Easy Personal FTP Service Denial Of Service

!usr/bin/perl -w XM Easy Personal FTP Server 5.x allows remote attackers to cause a denial of service via a "HELP" or "TYPE" command with an overly long argument. Refer: http://secunia.com/advisories/35271/ Original advisory avaiable at:...

XM Easy Personal FTP Server多个FTP命令远程溢出漏洞

BUGTRAQ ID: 35239 XM Easy Personal FTP Server是一款简单易用的个人FTP服务器工具。 如果远程攻击者向XM Easy Personal FTP Server发送了超过4700字节的超长HELP或TYPE FTP命令的话，就可能触发缓冲区溢出，导致服务器崩溃。攻击者必须首先能够登录到服务器才能利用这个漏洞；此外由于没有覆盖寄存器，因此无法执行任意代码。 dxmsoft XM Easy Personal FTP Server 5.7.0 厂商补丁： dxmsoft -------...

CUPS pdftops过滤器多个整数溢出漏洞

BUGTRAQ ID: 35195 CVECAN ID: CVE-2009-0791 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的pdftops过滤器中存在多个可能导致堆溢出的整数溢出漏洞。攻击者可以创建恶意的PDF文件，如果打印了该文件就会导致pdftops崩溃或以运行lp用户的权限执行任意指令。 Easy Software Products CUPS 1.1.22 厂商补丁： Easy Softwar...

[Security] XM Easy Personal FTP Server Multiple DoS vulnerabilities

XM Easy Personal FTP Server Multiple DoS vulnerabilities Credits: NeerajT of Nevis Labs http://www.nevisnetworks.com/services.php?id=10 Date of Discovery: 14-May-2009 Vendor: Dxmsoft URL: http://www.dxm2008.com/ Affected: XM Easy Personal FTP Server 5.7.0 Earlier versions may also be affected...

CUPS调度程序目录服务远程拒绝服务漏洞

BUGTRAQ ID: 35194 CVECAN ID: CVE-2009-1196 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 用于处理可用打印机和打印机类的CUPS调度程序目录服务例程中存在释放后使用漏洞，远程攻击者可以首先终止然后在一定的时间间隔后向运行cupsd守护程序的机器再发送CUPS浏览报文导致cupsd守护程序停止或崩溃。 Easy Software Products CUPS 1.1.22 厂商补...

CUPS cups/ipp.c空指针引用拒绝服务漏洞

BUGTRAQ ID: 35169 CVECAN ID: CVE-2009-0949 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 在处理包含有两个IPPTAGUNSUPPORTED标签的特质IPP时，CUPS的cups/ipp.c文件中的ippReadIO函数没有正确地初始化ipp结构，这可能导致受影响的应用崩溃。 cups/ipp.c文件中的ippReadIO函数负责初始化表示当前IPP请求中不同标签的ipp结构...

Directory traversal

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fiche parameter...

CVE-2009-1847

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fiche parameter...

CVE-2009-1847

CVE-2009-1847 affects Easy PX 41 CMS 9.0 B1, with a vulnerability in index.php that allows directory traversal via the fiche parameter, enabling remote inclusion/execution of local files. The provided documents do not specify affected subversions beyond the product/version, nor a patch or workaro...

CVE-2009-1847

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fiche parameter...

Easy Px 41 CMS v09.00.00B1 (fiche) Local File Inclusion Vulnerability

No description provided by source. Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit: /path/?view=LivreDor&fiche=../../../../../../../../etc/passwd%00 Demo...

Easy Px 41 CMS Local File Inclusion

Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit: /path/?view=LivreDor&fiche=../../../../../../../../etc/passwd%00 Demo...

Easy Px 41 CMS v09.00.00B1 (fiche) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Easy Px 41 CMS v09.00.00B1 fiche Local File Inclusion Vulnerability ===================================================================== Easy Px 41 CMS v09.00.00B1 fich...

MyForum 1.3 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. + MyForum 1.3 Auth Bypass Remote SQL Injection + Discovered By : ThE g0bL!N + Greetz : All my freind + Note: Tested On localhost : + http://www.easy-script.com/scripts-dl/myforumv1.3.zip Exploit: ------- Username: realadminname Password:' or '1=1 Or Username:...