Debian DSA-1830-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0040 The execution of arbitrary code might be possible via a crafted...

PHP Auktion Pro SQL Injection

----------------------------Information------------------------------------------------ +Name : Php Auktion Pro SQL Injection news.php +Autor : Easy Laster +Date : 22.02.2010 +Script : Php Auktion Pro +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/auktionblau/...

Debian DSA-1832-1 : camlimages - integer overflow

Tielei Wang discovered that CamlImages, an open source image processing library, suffers from several integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-1912-1 : camlimages - integer overflow

It was discovered that CamlImages, an open source image processing library, suffers from several integer overflows, which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. This advisory addresses issues with the reading of TIFF files. It also expands the...

Top Auktion - 'news.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Top Auktion SQL Injection news.php +Autor : Easy Laster +Date : 22.10.2010 +Script : Top Auktion +Price : 34,90€ +Language : PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz...

Php Auktion Pro SQL (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Php Auktion Pro SQL news.php SQL Injection Vulnerability ==========================================================...

Top Auktion - news.php SQL Injection

Top Auktion - news.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Top Auktion SQL Injection news.php +Autor : Easy Laster +Date : 22.10.2010 +Script : Top Auktion +Price : 34,90€ +Language : PHP +Discovered by Easy Laster +Securit...

Ero Auktion 2010 SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion 2010 SQL Injection news.php +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/flashauktion2010/ +Price : 39,90€ +Language...

Ero Auktion v2.0 (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Ero Auktion v2.0 news.php SQL Injection Vulnerability =======================================================...

[Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2010-004: SAP J2EE Authentication Phishing Vector This advisory can be downloaded from http://www.onapsis.com/research.html. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

Ero Auktion 2.0 - 'news.php' SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to...

Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability

Advisory ID Internal CORE-2009-0827 1. Advisory Information Title: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability Advisory Id: CORE-2009-0827 Date published: 2010-02-09 Date of last update: 2010-02-08 Vendors contacted: Microsoft Release mode: Coordinated...

CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities 1. Advisory Information Title: Internet Explorer Dynamic OBJECT tag and URLMON sniffing...

[CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Cisco Secure Desktop XSS/JavaScript Injection 1. Advisory Information Title: Cisco Secure Desktop XSS/JavaScript Injection Advisory Id: CORE-2010-0106 Advisory URL:...

Cisco Secure Desktop XSS/JavaScript Injection

1. Advisory Information Title: Cisco Secure Desktop XSS/JavaScript Injection Advisory Id: CORE-2010-0106 Advisory URL:http://www.coresecurity.com/core-labs/advisories/cisco-secure-desktop-xss Date published: 2010-02-01 Date of last update: 2010-02-01 Vendors contacted: Cisco Release mode:...

IPB (nv2) Awards 1.1.0 - SQL Injection

IPB nv2 Awards 1.1.0 - SQL Injection + + Author: fred777 - fred777.de + Link: http://forums.invisionize.com/nv2-Awards-120-t137847.html + Vuln: index.php?autocom=awards&do=view&id=1 + Greetzz to: Back2hack.cc + Contact: [email protected] + -- Vuln Code -- $this-ipsclass-DB-buildquery...

IPB (nv2) Awards < 1.1.0 - SQL Injection

Author: fred777 - fred777.de + Link: http://forums.invisionize.com/nv2-Awards-120-t137847.html + Vuln: index.php?autocom=awards&do=view&id=1 + Greetzz to: Back2hack.cc + Contact: [email protected] + -- Vuln Code -- $this-ipsclass-DB-buildquery array 'select' = 'a.userid', 'from' =...

Oracle Document Capture ImportBodyText — read files

Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL: Oracle Bugs: Unsecure READ method Exploits: YES Reported: 29.01.2010 Second report: 02.02.2010 Date of Public Advisory: 24.01.2010 CVE-number:CVE-2010-3595 Author: Alexey Sintsov Description EasyMail ActiveX Control...

Safari 4.0.4 Crash

No description provided by source. The following piece of javascript will crash Safari nicely when triggered using one \ of the methods described below. With my limited knowledge I am unable to tell if \ it's exploitable or not. I therefore turn it over to "the internet". tested on \ Safari 4.0.4...

[CORE-2009-1209] Google SketchUp &#39;lib3ds&#39; 3DS Importer Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Google SketchUp 'lib3ds' 3DS Importer Memory Corruption 1. Advisory Information Title: Google SketchUp 'lib3ds' 3DS Importer Memory Corruption Advisory Id:...