3066 matches found
php security update
CentOS Errata and Security Advisory CESA-2007:0154-01 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...
Mandrake Linux Security Advisory : kernel (MDKSA-2007:078)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : When SELinux hooks are enabled, the kernel could allow a local user to cause a DoS crash via a malformed file stream that triggers a NULL pointer derefernece CVE-2006-6056. Multiple buffer overflows in the 1 read and 2...
core-dumping unreadable binaries via PT_INTERP
Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter PTINTERP functionality and triggering a core dump, a variant of CVE-2004-1073...
[SECURITY] Fedora Core 6 Update: mono-1.1.17.1-4.fc6
The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...
CVE-2006-6064
Multiple buffer overflows in the Message Parsing Interpreter MPI in Fuzzball MUCK before 6.07 allow remote attackers to execute arbitrary code via crafted messages...
CVE-2006-6064: Undefined Security Weakness
Multiple buffer overflows in the Message Parsing Interpreter MPI in Fuzzball MUCK before 6.07 allow remote attackers to execute arbitrary code via crafted messages...
CVE-2005-4814
Segue CMS
CVE-2005-4814
Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory...
RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork:...
DSA-1198-1 python2.3
Bulletin has no description...
DSA-1197-1 python2.4
Bulletin has no description...
Debian DSA-1157-1 : ruby1.8 - several vulnerabilities
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1931 It was discovered that the use of...
Debian DSA-948-1 : kdelibs - buffer overflow
Maksim Orlovich discovered that the kjs JavaScript interpreter, used in the Konqueror web browser and in other parts of KDE, performs insufficient bounds checking when parsing UTF-8 encoded Uniform Resource Identifiers, which may lead to a heap based buffer overflow and the execution of arbitrary...
Debian DSA-1046-1 : mozilla - several vulnerabilities
Several security related problems have been discovered in Mozilla. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-2353 The 'run-mozilla.sh' script allows local users to create or overwrite arbitrary files when debugging is enabled via a...
RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution
RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site:...
RaidenHTTPD 1.1.49 - 'SoftParserFileXml' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork: Powered.by.RaidenHTTPD +intitle:index.of |...
[SECURITY] [DSA 1157-1] New ruby1.8 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1157-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 27th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 1139-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 3rd, 2006 http://www.debian.org/security/faq -...
USN-320-2: php4 regression
USN-320-2 fixed several vulnerabilities in PHP. James Manning discovered that the Ubuntu 5.04 update introduced a regression, the function tempnam caused a crash of the PHP interpreter in some circumstances. The updated packages fix this. We apologize for the inconvenience...