1702 matches found
CVE-2008-7004
ELOG before 2.7.1 is affected by multiple vulnerabilities, including a remote buffer overflow (likely in elog.c) with CVSS-like indication of high impact. Affected product: Electronic Logbook (ELOG); vulnerable component/file: elog.c; version prior to 2.7.1. OpenVAS confirms multiple issues and l...
efm-rfi.txt
Application Name : Electronic File Management 1.5.01 Vulnerable Type : Remote File Inclusion Vulnerability Infection : Remote File Control, Editing... Bug Fix Advice : variable to define Author : Septemb0x Script Down.& WebSite : http://electronicfilemanagement.net/TrialDownload/EFM1.5.01.rar...
[SECURITY] [DSA 1822-1] New mahara packages fix cross-site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1822-1 [email protected] http://www.debian.org/security/ Nico Golde June 23rd, 2009 http://www.debian.org/security/faq -...
DSA-1822-1 mahara - cross-site scripting
Bulletin has no description...
[SECURITY] Fedora 11 Update: opensc-0.11.8-1.fc11
OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...
Canadian Parliament considers anti-malware law
From Stop Badware Maxim Weinstein The Canadian House of Commons is considering bill C-27 gc.ca, the Electronic Commerce Protection Act. In addition to providing civil penalties for unsolicited commercial e-mail spam and the unauthorized interception of e-mail man in the middle attacks, it provide...
Clarity needed on cyberwar plans, study says
From The New York Times John Markoff and John Shanker A study conducted by the National Academy of Sciences found that the United States military needs to create an open, public dalogue to clarify its plans around using offensive weapons in cyberspace. The study also recommends that the military...
Siqma Electronic Shop SQL Injection
Securitylab.ir Application Info: Name: Siqma Electronic Shop SES Website: http://www.siqma.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: High...
Hathaway, Obama administration swing and miss at RSA
Much of the talk at the RSA Conference last week centered on the lack of the unifying theme or big-time story that usually emerges to take over the show by mid-week. But there was, in fact, a major story, and it was the abject failure of the Obama administration, in the person of Melissa Hathaway...
[SECURITY] [DSA 1778-1] New mahara packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA-1778-1 [email protected] http://www.debian.org/security/ Nico Golde April 22nd, 2009 http://www.debian.org/security/faq -...
Secret documents reveal FBI spyware campaign against hackers
The FBI has been using an in-house spyware program for several years to monitor the activities of suspected online criminals and hackers, according to recently released documents. The documents, obtained by Wired.com, show that the FBI was able to plant the program on target machines by encouragi...
DSA-1736-1 mahara - cross-site scripting
Bulletin has no description...
gEDA: Insecure temporary file creation
Background gEDA is an Electronic Design Automation tool used for electrical circuit design. Description Dmitry E. Oboukhov reported an insecure temporary file usage within the sch2eaglepos.sh script. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with the...
Command injection
The Electronic Messaging System Microsoft Data Base EMSMDB32 provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service application outage via a malformed MAPI command, aka "Literal...
Nokia S60系列手机畸形短信/彩信远程拒绝服务漏洞
BUGTRAQ ID: 33074 Nokia S60系列是运行symbian平台的智能手机。 3GPP TS 23.040标准中规定了通过短信发送邮件的方法。邮件短信的最基本形式以MT-SMS或MO-SMS开始，之后为空格，最后为消息正文。短信消息的TP协议标识符必须设置为Internet Electronic Mail（值为50/0x32）。 但上述标准没有规定手机接收到短信后如何显示。在S60 2.6之前版本，Series60设备按原样显示消息；从S60...
Nokia S60 SMSMMS (Curse of Silence) - Denial of Service
Nokia S60 SMSMMS Curse of Silence - Denial of Service Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...
PHPmyGallery Gold 1.51 Directory Traversal
Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure + Download :http://phpmygallery.kapierich.net/en/downloads/ +...
PHPmyGallery Gold 1.51 (index.php) Directory Traversal Vulnerability
No description provided by source. Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure + Download...
PHPmyGallery Gold 1.51 - index.php Directory Traversal
PHPmyGallery Gold 1.51 - index.php Directory Traversal Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure +...
PHPmyGallery Gold 1.51 - 'index.php' Directory Traversal
Yee7.Com zAx PHPmyGallery Gold 1.51 index.php Folders Disclosure ----------------------------------------------------------------------------------------------------------- + Script : PHPmyGallery Gold 1.51 + Vuln. : Folders Disclosure + Download :http://phpmygallery.kapierich.net/en/downloads/ +...