Stable Update: Security Fix

Google Chrome's Stable channel has been updated to version 1.0.154.64 to fix two security issues discovered by internal Google testing. This release also contains A new notification at startup that makes it easier to set Google Chrome as the default browser. If you don't want Google Chrome to be...

[Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow

GOM Encoder Heap-based Buffer Overflow 1. General Information GOM Encoder is a video transcoder that can work with a lot of video formats. One of its functions is embedding subtitles to the video, which means you can see subtitles on the resulting video even if your device doesn't support subtitl...

Multiple vulnerabilities in TYPO3 third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "Accessibility Glossary" a21glossary, "Calendar Base" cal, "Flat Manager" flatmgr Release Date: March 05, 2009 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with...

Zabbix 1.6.2 Frontend Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================== Zabbix 1.6.2 Frontend Multiple Vulnerabilities ============================================== Zabbix 1.6.2 Frontend Multiple Vulnerabilities Name Multiple Vulnerabilities in Zabbix Frontend...

DZcms 3.1 SQL Injection

Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

DZcms 3.1 - SQL Injection

Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

DZcms 3.1 - SQL Injection

DZcms 3.1 - SQL Injection Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

DZcms v.3.1 (products.php pcat) Remote SQL Injection Vulnerability

No description provided by source. Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability

Title: CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability CA Advisory Reference: CA20090107-01 CA Advisory Date: 2009-01-07 Reported By: Michel Arboi of Tenable Network Security Impact: A remote attacker can execute arbitra...

HTMPL 1.11 - Command Execution

HTMPL 1.11 - Command Execution Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few othe...

HTMPL 1.11 Code Execution

Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few other little..... tricks The admins...

Collabtive 0.4.8 Multiple Vulnerabilities

Collabtive 0.4.8 Multiple Vulnerabilities Name Multiple Vulnerabilities in Collabtive Systems Affected Collabtive 0.4.8 and possibly earlier versions Severity High Impact CVSSv2 High 8/10, vector: AV:N/AC:L/Au:S/C:P/I:C/A:P Vendor http://collabtive.o-dyn.de/ Advisory...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...

DFLabs PTK <= 1.0 Local Command Execution Vulnerability

Exploit for unknown platform in category web applications ======================================================= DFLabs PTK = 1.0 Local Command Execution Vulnerability ======================================================= ==================================================== Security Research...

DFLabs PTK 1.0 - Local Command Execution

DFLabs PTK 1.0 - Local Command Execution ==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com...

DFLabs PTK 1.0 - Local Command Execution

==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affected Software DFLabs PT...

postaffiliate-lfi.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Software : Post Affiliate Pro v2.0 Vulnrability : Local File Inclusion Severity : High Author : ZeN Date : 16 October 2008 Websites http://DUSecurity.com http://DarkCode.me PS : You MUST be logged into the system for the exploit to work...

Post Affiliate Pro 2.0 (index.php md) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Post Affiliate Pro 2.0 index.php md Local File Inclusion Vulnerability ========================================================================...

Post Affiliate Pro 2.0 - md Local File Inclusion

Post Affiliate Pro 2.0 - md Local File Inclusion =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Software : Post Affiliate Pro v2.0 Vulnrability : Local File Inclusion Severity : High Author : ZeN Date : 16 October 2008 Websites http://DUSecurity.com http://DarkCode.me PS : You MUST be...

Post Affiliate Pro 2.0 - 'md' Local File Inclusion

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Software : Post Affiliate Pro v2.0 Vulnrability : Local File Inclusion Severity : High Author : ZeN Date : 16 October 2008 Websites http://DUSecurity.com http://DarkCode.me PS : You MUST be logged into the system for the exploit to work...