vg-onlinebookmarks-3-12-2006.txt

3/12/06 Vigilon Advisory http://www.vigilon.com/vg-onlinebookmarks-3-12-2006.txt ------------------------------------------------------- Application: OnLine Bookmarks Web Site: http://www.frech.ch/online-bookmarks/ Versions: 0.6.12 Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting...

Online BookMarks Multiple SQL Injection/XSS Vulnerabilities

3/12/06 Vigilon Advisory http://www.vigilon.com/vg-onlinebookmarks-3-12-2006.txt ------------------------------------------------------- Application: OnLine Bookmarks Web Site: http://www.frech.ch/online-bookmarks/ Versions: 0.6.12 Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting...

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability

Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across...

[Full-disclosure] AVG Anti-Virus - Arbitrary Code Execution (remote)

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.002 13-Nov-2006 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Arbitrary Code Execution remote Vendor communication: 2006/08/24 initial notification to Grisoft Inc. 2006/08/24 Grisoft Inc. Respon...

IrayoBlog 0.2.4 (inc/irayofuncs.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== IrayoBlog 0.2.4 inc/irayofuncs.php Remote File Include Vulnerability ====================================================================== Portal Name...

Solaris 5.7 (sparc) : 109209-20

Sun Cluster 2.2: Framework/Comm Patch. Date this patch was last updated by Sun : Feb/13/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 9 (sparc) : 113801-12

Sun Cluster 3.1: Core/Sys Admin Patch. Date this patch was last updated by Sun : May/20/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 119166-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 117201-09

X11 6.6.1: st patch. Date this patch was last updated by Sun : Feb/23/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid23531;...

ProgSys-0.151.txt

25/10/06 Vigilon Advisory http://www.vigilon.com/advisories/vg-progsys-24-10-2006.txt ------------------------------------------------------- Application: ProgSys Web Site: http://www.boesch-it.de/sw/php-scripts/progsys/english/download.php Versions: 0.151 and below Platform: linux, windows,...

PocketExpense Pro绕过数据访问认证漏洞

PocketExpense Pro是运行在PDA上的记帐工具。 PocketExpense Pro在处理用户访问数据的口令认证机制存在漏洞，攻击者可以轻易绕过口令认证访问数据。 PocketExpense Pro通过用户口令保护文件中的数据，但密钥没有用于加密实际的数据，仅仅用于认证用户，因此攻击者可以通过在文件头中将0x7d94处的16进制值从F4改为D4禁用认证功能。 Motricity, Inc. PocketExpense Pro 3.9.1 厂商补丁： Motricity, Inc. ---------------...

Advisory for Oneorzero helpdesk

Permanant Link : http://www.whitedust.net/speaks/3043/ ------------------------------------------------------------ - Advisory for OneOrZero Helpdesk - ------------------------------------------------------------ - OneOrZero Helpdesk - AFFECTED PRODUCTS ================= OneOrZero Helpdesk v1.6.0...

CMScontenido-path.txt

CMS contenido Path Disclosure Affected Software .: CMS contenido download..: http://www.contenido.org/opensourcecms/en/index-a-104.html Risk ..............: high Found by ..........: CvIr.System Contact ...........: CvIr.Systematgmail.com Affected File: /conlib/.inc Explicasion:...

NVIDIA Display Driver for Unix systems vulnerable to buffer overflow

Overview A vulnerability in the NVIDIA Display Driver for Unix systems may allow a remote attacker to execute code on a vulnerable system. Description The NVIDIA Display Driver for Unix systems provides access to the display adapter's accelerated features on supported systems, and includes a modu...

PT-2006-5967 · Isearch · Isearch

Name of the Vulnerable Software and Affected Versions: iSearch version 2.16 Description: The issue concerns remote file inclusion vulnerabilities that could allow remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the isearch path parameter within various PHP...

phpQuestionnaire3.12.txt

SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-08.txt Greetz: choi ,...

CVE-2006-4971

CVE-2006-4971 affects MyBB (MyBulletinBoard). A direct request to inc/plugins/hello.php allows remote attackers to trigger an error message that reveals the server path, exposing sensitive information. Impact: partial confidentiality. CVSS v2 base score: 5.0 (MEDIUM) . The supplied documents do n...

PT-2006-5709 · Phpq · Phpq

Name of the Vulnerable Software and Affected Versions: phpQ version 3.12 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpQRootDir parameter in the inc/ifunctions.php file. Recommendations: For phpQ version 3.12, consider restricting access to the...

Google Mini Search Applicance Path Disclosure

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Google Inc - Google Mini Search Appliance http://www.google.com.au/enterprise/mini/index.html "The Google Mini delivers cost-effective, high-quality search for your public...

phpQuestionnaire 3.12 - phpQRootDir Remote File Inclusion

phpQuestionnaire 3.12 - phpQRootDir Remote File Inclusion SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website :...