Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions source: https://www.securityfocus.com/bid/6616/info A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation...

PHPBBMod 1.3.3 - PHPInfo Information Disclosure

PHPBBMod 1.3.3 - PHPInfo Information Disclosure source: https://www.securityfocus.com/bid/5942/info phpBBmod ships with a sample script phpinfo.php that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment...

NetSQL 1.0 - Remote Buffer Overflow

NetSQL 1.0 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2885/info NetSQL is an implementation of a database and toolset distributed by Munica Corporation. NetSQL is part of 5 piece software package called the Webpak, containing utilities for features such as web boards,...

PHPSlash 0.5.3 20.6.1 - URL Block Arbitrary File Disclosure

PHPSlash 0.5.3 20.6.1 - URL Block Arbitrary File Disclosure source: https://www.securityfocus.com/bid/2724/info PHPSlash is a widely used open source Groupware utility. PHPSlash contains a vulnerability which may disclose files readable to the webserver process on the underlying host to PHPSlash...

Way-Board 2.0 - File Disclosure

source: https://www.securityfocus.com/bid/2370/info A remote user could gain read access to known files outside of the root directory where Way-Board resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename will disclose the requested file...

Axis Communications StorPoint CD - Authentication Bypass

Axis Communications StorPoint CD - Authentication Bypass source: https://www.securityfocus.com/bid/1025/info Axis StorPoint CD and Axis StorPoint CD/T are CD ROM servers actual hardware unitssold by Axis Communications. Both of these appliances support remote management via SNMP MIB-II and privat...

mysql.txt

Hi, Below you find a security advisory i wrote concerning a vulnerability found in all known to me mysql server versions, including the latest one. As mysql is a widely used sql platform, i strongly advise everyone using it to read it, and fix where appropriate. This email has been bcc'd to the...