Siqma Electronic Shop SQL Injection

Securitylab.ir Application Info: Name: Siqma Electronic Shop SES Website: http://www.siqma.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: High...

Hathaway, Obama administration swing and miss at RSA

Much of the talk at the RSA Conference last week centered on the lack of the unifying theme or big-time story that usually emerges to take over the show by mid-week. But there was, in fact, a major story, and it was the abject failure of the Obama administration, in the person of Melissa Hathaway...

[SECURITY] [DSA 1778-1] New mahara packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA-1778-1 [email protected] http://www.debian.org/security/ Nico Golde April 22nd, 2009 http://www.debian.org/security/faq -...

Secret documents reveal FBI spyware campaign against hackers

The FBI has been using an in-house spyware program for several years to monitor the activities of suspected online criminals and hackers, according to recently released documents. The documents, obtained by Wired.com, show that the FBI was able to plant the program on target machines by encouragi...

DSA-1736-1 mahara - cross-site scripting

Bulletin has no description...

gEDA: Insecure temporary file creation

Background gEDA is an Electronic Design Automation tool used for electrical circuit design. Description Dmitry E. Oboukhov reported an insecure temporary file usage within the sch2eaglepos.sh script. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with the...

Command injection

The Electronic Messaging System Microsoft Data Base EMSMDB32 provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service application outage via a malformed MAPI command, aka "Literal...

Nokia S60系列手机畸形短信/彩信远程拒绝服务漏洞

BUGTRAQ ID: 33074 Nokia S60系列是运行symbian平台的智能手机。 3GPP TS 23.040标准中规定了通过短信发送邮件的方法。邮件短信的最基本形式以MT-SMS或MO-SMS开始，之后为空格，最后为消息正文。短信消息的TP协议标识符必须设置为Internet Electronic Mail（值为50/0x32）。 但上述标准没有规定手机接收到短信后如何显示。在S60 2.6之前版本，Series60设备按原样显示消息；从S60...

Nokia S60 SMSMMS (Curse of Silence) - Denial of Service

Nokia S60 SMSMMS Curse of Silence - Denial of Service Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...

PHPmyGallery Gold 1.51 Directory Traversal

Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure + Download :http://phpmygallery.kapierich.net/en/downloads/ +...

PHPmyGallery Gold 1.51 (index.php) Directory Traversal Vulnerability

No description provided by source. Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure + Download...

PHPmyGallery Gold 1.51 - index.php Directory Traversal

PHPmyGallery Gold 1.51 - index.php Directory Traversal Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure +...

PHPmyGallery Gold 1.51 - 'index.php' Directory Traversal

Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure + Download :http://phpmygallery.kapierich.net/en/downloads/ +...

Debian: Security Advisory (DSA-1634-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1634-1 : wordnet - stack and heap overflows

Rob Holland discovered several programming errors in WordNet, an electronic lexical database of the English language. These flaws could allow arbitrary code execution when used with untrusted input, for example when WordNet is in use as a back end for a web application. %NASLMINLEVEL 70300 C...

CVE-2008-0445

The replaceinlineimg function in elogd in Electronic Logbook ELOG before 2.7.1 allows remote attackers to cause a denial of service infinite loop via crafted logbook entries. NOTE: some of these details are obtained from third party information...

CVE-2008-0444

Cross-site scripting XSS vulnerability in Electronic Logbook ELOG before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components...

Information disclosure

The replaceinlineimg function in elogd in Electronic Logbook ELOG before 2.7.1 allows remote attackers to cause a denial of service infinite loop via crafted logbook entries. NOTE: some of these details are obtained from third party information...

CVE-2008-0444

Cross-site scripting XSS vulnerability in Electronic Logbook ELOG before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components...

CVE-2008-0444

CVE-2008-0444 affects Electronic Logbook (ELOG) versions before 2.7.0. The vulnerability is a Cross-site Scripting (XSS) issue that could allow remote attackers to inject arbitrary web script or HTML through the subtext parameter to unspecified components. The available connected sources confirm ...