STG Security Advisory 2005-01-20.22

STG Security Advisory: SSA-20050120-22 JSBoard file disclosure vulnerability. Revision 1.0 Date Published: 2005-01-20 KST Last Update: 2005-01-20 KST Disclosed by SSR Team [email protected] Summary ======== JSBoard is one of widely used web BBS applications in Korea. Because of an input...

STG Security Advisory 2005-01-20.24

STG Security Advisory: SSA-20050120-24 GForge 3.x directory traversal vulnerability. Revision 1.0 Date Published: 2005-01-20 KST Last Update: 2005-01-20 KST Disclosed by SSR Team [email protected] Summary ======== GForge is a software to help collaborative development for software...

STG Security Advisory: [SSA-20050120-22] JSBoard file disclosure vulnerability

STG Security Advisory: SSA-20050120-22 JSBoard file disclosure vulnerability. Revision 1.0 Date Published: 2005-01-20 KST Last Update: 2005-01-20 KST Disclosed by SSR Team [email protected] Summary ======== JSBoard is one of widely used web BBS applications in Korea. Because of an input...

STG Security Advisory: [SSA-20050120-24] GForge 3.x directory traversal vulnerability

STG Security Advisory: SSA-20050120-24 GForge 3.x directory traversal vulnerability. Revision 1.0 Date Published: 2005-01-20 KST Last Update: 2005-01-20 KST Disclosed by SSR Team [email protected] Summary ======== GForge is a software to help collaborative development for software...

Mac OS X <= 10.3.7 Input Validation Flaw parse_machfile() DoS

No description provided by source. / DoS for Darwin Kernel Version 7.5.0 -nemo pulltheplug org- 2005 greetz to awnex, cryp, nt, andrewg, arc, mercy, amnesia ; irc.pulltheplug.org social / include stdio.h int main int ac, char av FILE me; int rpl = 0xffffffff; fpost pos = 0x10; printf "- nacho -...

Apple Mac OSX 10.3.7 - Input Validation Flaw parse_machfile() Denial of Service

Apple Mac OSX 10.3.7 - Input Validation Flaw parsemachfile Denial of Service / DoS for Darwin Kernel Version int main int ac, char av FILE me; int rpl = 0xffffffff; fpost pos = 0x10; printf "- nacho - 2004 DoS for OSX darwin 7.5.0 -\n" ; printf "- nemo pulltheplug org -\n\n" ; printf "+ Opening...

Apple Mac OSX 10.3.7 - Input Validation Flaw 'parse_machfile()' Denial of Service

/ DoS for Darwin Kernel Version int main int ac, char av FILE me; int rpl = 0xffffffff; fpost pos = 0x10; printf "- nacho - 2004 DoS for OSX darwin 7.5.0 -\n" ; printf "- nemo pulltheplug org -\n\n" ; printf "+ Opening file for writing.\n" ; if ! me = fopen av, "r+" printf "- Error opening exe.\n...

STG Security Advisory 2005-01-13.25

STG Security Advisory: SSA-20050113-25 ZeroBoard multiple vulnerabilities Revision 1.1 Date Published: 2004-12-31 KST Last Update: 2005-1-13 Disclosed by SSR Team [email protected] Summary ======= ZeroBoard is one of widely used web BBS applications in Korea. However, an input validation...

STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities

STG Security Advisory: SSA-20050113-25 ZeroBoard multiple vulnerabilities Revision 1.1 Date Published: 2004-12-31 KST Last Update: 2005-1-13 Disclosed by SSR Team [email protected] Summary ======= ZeroBoard is one of widely used web BBS applications in Korea. However, an input validation...

STG Security Advisory: [SSA-20041224-21] File extensions restriction bypass vulnerability in GNUBoard

STG Security Advisory: SSA-20041224-21 File extensions restriction bypass vulnerability in GNUBoard. Revision 1.0 Date Published: 2004-12-24 KST Last Update: 2005-01-03 Disclosed by SSR Team [email protected] Summary ======== GNUBoard is one of widely used web BBS applications in Korea...

STG Security Advisory 2004-12-20.16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041220-16 PHP source injection and cross-site scripting vulnerabilities in ZeroBoard Revision 1.2 Date Published: 2004-12-20 KST Last Update: 2004-12-24 Disclosed by SSR Team [email protected] Summary =======...

STG Security Advisory 2004-12-14.14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041214-14 GNUBoard PHP injection vulnerability. Revision 1.0 Date Published: 2004-12-14 KST Last Update: 2004-12-14 Disclosed by SSR Team [email protected] Summary ======== GNUBoard is one of widely used web BBS...

STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard

STG Security Advisory: SSA-20041220-16 PHP source injection and cross-site scripting vulnerabilities in ZeroBoard Revision 1.2 Date Published: 2004-12-20 KST Last Update: 2004-12-24 Disclosed by SSR Team [email protected] Summary ======= ZeroBoard is one of widely used web BBS applications...

STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki

STG Security Advisory: SSA-20041215-15 Vulnerability of uploading files with multiple extensions in MoniWiki Revision 1.0 Date Published: 2004-12-15 KST Last Update: 2004-12-15 Disclosed by SSR Team [email protected] Summary ======== MoniWiki is a wiki web application used by many Korean...

STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability

STG Security Advisory: SSA-20041214-14 GNUBoard PHP injection vulnerability Revision 1.0 Date Published: 2004-12-14 KST Last Update: 2004-12-14 Disclosed by SSR Team [email protected] Summary ======== GNUBoard is one of widely used web BBS applications in Korea. Because of an input...

STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard

STG Security Advisory: SSA-20041215-17 Vulnerability of uploading files with multiple extensions in JSBoard Revision 1.0 Date Published: 2004-12-15 KST Last Update: 2004-12-15 Disclosed by SSR Team [email protected] Summary ======== JSBoard is one of widely used web BBS applications in...

STG Security Advisory 2004-11-22.10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-10 KorWeblog directory traversal vulnerability Revision 1.3 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== KorWeblog is a weblog application us...

STG Security Advisory 2004-11-22.12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-12 Zwiki XSS vulnerability Revision 1.1 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== Zwiki is a wiki clone in zope. It has a cross site...

STG Security Advisory 2004-11-22.11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-11 JSPWiki XSS vulnerability Revision 1.0 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== JSPWiki is one of famous wiki web applications. It has...

[Full-Disclosure] STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-12 Zwiki XSS vulnerability Revision 1.1 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== Zwiki is a wiki clone in zope. It has a cross site...