ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection

Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6 Vulnerability Class: SQL injection Release Date: 03-18-2010 Affected Applications: Confirmed in version 7.6. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote Severity: High – CVSS: 9...

[SECURITY] [DSA 2011-1] New dpkg packages fix path traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA-2011-1 [email protected] http://www.debian.org/security/ Nico Golde March 10th, 2010 http://www.debian.org/security/faq -...

iPhone / iTouch FTPDisc 1.0 Buffer Overflow

Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker - Tested from GNU/Linux Sidux, fuzzing with a future PenTBox versi...

iPhone iTouch FtpDisc 1.0 - Buffer Overflow (Denial of Service) (PoC)

iPhone iTouch FtpDisc 1.0 - Buffer Overflow Denial of Service PoC Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker ...

iPhone / iTouch FtpDisc 1.0 - Buffer Overflow (Denial of Service) (PoC)

Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker - Tested from GNU/Linux Sidux, fuzzing with a future PenTBox versi...

[SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2004-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 28, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2001-1 [email protected] http://www.debian.org/security/ Raphael Geissert February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1999-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

Command injection

PyGIT.py in the Trac Git plugin trac-git before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command...

CVE-2010-0394

PyGIT.py in the Trac Git plugin trac-git before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command...

CVE-2010-0394

PyGIT.py in the Trac Git plugin trac-git before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command...

CVE-2010-0394: Improper Input Validation

PyGIT.py in the Trac Git plugin trac-git before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command...

[SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1991-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 04, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1981-1] New maildrop packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1981-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 28, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1978-1] New phpgroupware packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1978-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 26, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1980-1] New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1980-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 27, 2010 http://www.debian.org/security/faq -...