Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Multiple DoS in JAR files manipulation procedures April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server on Windows platform. Remote exploitable: Yes Authentication to Database Server...

CUPS: Integer overflow vulnerability

Background CUPS provides a portable printing layer for UNIX-based operating systems. Description Thomas Pollet reported a possible integer overflow vulnerability in the PNG image handling in the file filter/image-png.c. Impact A malicious user might be able to execute arbitrary code with the...

Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability

Exploit for unknown platform in category web applications ============================================================ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability ============================================================...

BSD (Multiple Distributions) - 'strfmon()' Integer Overflow

// source: https://www.securityfocus.com/bid/28479/info Multiple BSD platforms are prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application. Failed exploit attempts wil...

[DSECRG-08-020] RFI-LFI in PowerClan 1.14a

DSECRG-08-020 Digital Security Research Group DSecRG Advisory Application: PowerClan Versions Affected: 1.14a Vendor URL: http://www.powerscripts.org/ Bug: Remote/Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory: ..2008 Author:...

CORE-2008-0123: Leopard Server Remote Path Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Leopard Server Remote Path Traversal Advisory Information Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Advisory URL:...

AST-2008-002: Two buffer overflows in RTP Codec Payload Handling

Asterisk Project Security Advisory - AST-2008-002 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Two buffer overflows in RTP Codec Payload | | | Handling |...

RecurityLabs_Cisco_ACS_UCP_advisory.txt

Recurity Labs GmbH http://www.recurity-labs.com [email protected] Date: 12.03.2008 Vendor: Cisco Systems Product: Cisco Secure Access Control Server ACS for Windows User-Changeable Password UCP application Vulnerability: Multiple remote pre-authentication buffer overflows Cross Site...

CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Timbuktu Pro Remote Path Traversal and Log Injection Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204...

Java Web Start tempbuff Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Web Start. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the useEncodingDecl function used while...

Minigal 2 critical XSS

Title: Minigal 2 critical XSS Author: Jose Carlos Norte [email protected] Date: 4-3-2008 Severity: high Vendor URL: http://www.minigal.dk/ ------- Introduction Minigal 2a.k.a. MG2 is a picture album written in PHP, it have a simple administration panels, and makes non-ajax browsable albums. -------...

sbe-rfi.txt

--==+================================================================================+==-- --==+ SiteBuilderElite1.2 Multiple Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: SiteBuilderElite1.2 Multiple...

SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities ===================================================================...

Path Traversal vulnerability in VMware's shared folders implementation

Path Traversal vulnerability in VMware's shared folders implementation Core Security Technologies - CoreLabs Advisory Advisory Information Title: Path Traversal vulnerability in VMware's shared folders implementation Advisory ID: CORE-2007-0930 Advisory URL:...

Core Security Technologies Advisory 2007.0930

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Path Traversal vulnerability in VMware's shared folders implementation Advisory Information Title: Path Traversal vulnerability in VMware's shared folders implementati...

Unfixed XSS vulnerability at www.familysecuritymatters.org

Security researcher APS, has submitted on 21/02/2008 a cross-site-scripting XSS vulnerability affecting www.familysecuritymatters.org, which at the time of submission ranked 336414 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It ...

SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2008-001 Advisory Title: Lyris ListManager - Multiple Vulnerabilities Author: Tyler Shields [email protected] Release Date: Wednesday, Januar...

lookstrike-rfilfi.txt

--==+================================================================================+==-- --==+ LookStrike Lan Manager v0.9 Remote\Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: LookStrike Lan Manager v0....

Directory traversal and DoS in WinIPDS G52-33-021

Luigi Auriemma Application: Intermate WinIPDS http://www.intermate.com/ipdssoftware Versions: = Release 3.3 Revision G52-33-021 Platforms: Windows Bugs: A directory traversal in web administration B Denial of Service versus the IPDS port Exploitation: remote Date: 12 Feb 2008 Author: Luigi Auriem...

IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow

IOActive Security Advisory Title: Multiple Buffer Overflows in Legacy modjk2 = 2.0.3-DEV Severity: High Date Discovered: 05.01.2007 Date Reported: 06.27.2007 Date Disclosed: 09.20.2007 Affected Products: modjk2 = v2.0.3-DEV F5 BIG-IP = 9.2.3.30 Other versions were not tested Synopsis: IOActive ha...