PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability

PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability OS2A ID: OS2A1007 Status: 08/20/2006 Issue Discovered 09/06/2006 Reported to the Vendor 09/09/2006 Fixed by Vendor 09/13/2006 Advisory Released Class: Cross Site Scripting Severity: Low Overview: --------- PHP Event Calendar...

[Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow

Overflow.pl Security Advisory 7 ImageMagick ReadSGIImage Heap Overflow Vendor: ImageMagick http://www.imagemagick.org Affected version: 6.x up to and including 6.2.8 Vendor status: Fixed version released 6.2.9 Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/imsgiheap.txt Date...

[Full-disclosure] Secunia Research: FileCOPA Directory Argument Handling Buffer Overflow

====================================================================== Secunia Research 25/07/2006 - FileCOPA Directory Argument Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Advisory: Remote command execution in planetGallery

Advisory: Remote command execution in planetGallery An admin of planetGallery is allowed to create new galleries and upload images. Because of a vulnerable regular expression, he may also upload PHP scripts and thereby execute arbitrary commands with the privileges of PHP. Details ======= Product...

DSA-1114 hashcash - buffer overflow

Bulletin has no description...

DSA-1053-1 mozilla - programming error

Bulletin has no description...

DSA-1014-1 firebird2 - buffer overflow

Bulletin has no description...

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice. Remediation There is no fixed version for openssh...

[Full-disclosure] [SECURITY] [DSA 942-1] New albatross packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 942-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...

DSA-933-1 hylafax - arbitrary command execution

Bulletin has no description...

MySQL MaxDB WebTools special character buffer overflow

Added: 12/22/2005 CVE: CVE-2005-0684 BID: 13368 OSVDB: 15816 Background MaxDB is a SAP-certified open-source database developed by MySQL. The WebTools component offers a set of database tools which are accessible from a web browser. The wahttp program listens on port 9999 and processes HTTP...

MySQL MaxDB WebTools special character buffer overflow

Added: 12/22/2005 CVE: CVE-2005-0684 BID: 13368 OSVDB: 15816 Background MaxDB is a SAP-certified open-source database developed by MySQL. The WebTools component offers a set of database tools which are accessible from a web browser. The wahttp program listens on port 9999 and processes HTTP...

MySQL MaxDB WebTools special character buffer overflow

Added: 12/22/2005 CVE: CVE-2005-0684 BID: 13368 OSVDB: 15816 Background MaxDB is a SAP-certified open-source database developed by MySQL. The WebTools component offers a set of database tools which are accessible from a web browser. The wahttp program listens on port 9999 and processes HTTP...

DSA-917-1 courier - programming error

Bulletin has no description...

[SA17650] Cerberus FTP Server Denial of Service Vulnerability

TITLE: Cerberus FTP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17650 VERIFY ADVISORY: http://secunia.com/advisories/17650/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Cerberus FTP Server 2.x http://secunia.com/product/1585/ DESCRIPTION: A vulnerabilit...

[Full-disclosure] chmlib exploitable buffer overflow

Advisory: chmlib exploitable buffer overflow Product: chmlib Affected Version: =0.36 Immune Version: 0.36 OS: Tested on linux 2.4 probably other OS affected as well Date: 26.10.2005 Author: Sven Tantau - http://www.sven-tantau.de/ Vendor-URL: http://morte.jedrea.com/7Ejedwin/projects/chmlib/...

[cosmoshop <= 8.10.78] be the shopadmin in one step

author : l0om innate| @t | gmx.de WWW.EXCLUDED.ORG product: cosmoshop version: = 8.10.78 problem: 1. sql injection 2. cleartext passwords 3. view any file maunuf.: www.cosmoshop.de what is cosmoshop cosmoshop is a comercial shop system written as a CGI. where is the problem 1. sql injection...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced. Remediation There is no fixed version for zlib...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. Heap-based buffer overflow in the Key Distribution Center KDC in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. Double free vulnerability in the krb5recvauth function in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. Remediation There is no fixed version for krb...