[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/fetchmail-6.3.20-i486-1slack13.37.txz: Upgraded. This...

UltraFXP v1.07 - Stack Buffer Overflow Vulnerability

Document Title: =============== UltraFXP v1.07 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 162 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

Web Browser - Remote Exploitation Session

Document Title: =============== Web Browser - Remote Exploitation Session References: =========== Download: http://www.vulnerability-lab.com/resources/videos/14.wmv View: http://www.youtube.com/watch?v=zSFJw9PMHU Release Date: ============= 2011-06-18 Vulnerability Laboratory ID VL-ID:...

Web Browser - Remote Exploitation Session

Document Title: =============== Web Browser - Remote Exploitation Session References: =========== Download: http://www.vulnerability-lab.com/resources/videos/14.wmv View: http://www.youtube.com/watch?v=zSFJw9PMHU Release Date: ============= 2011-06-18 Vulnerability Laboratory ID VL-ID:...

HTB23010: Multiple XSS & Local File Inclusion in Free Simple CMS

Vulnerability ID: HTB23010 Reference: http://www.htbridge.ch/advisory/multiplexssinfreesimplecms.html Product: Free Simple CMS Vendor: Dustin Cowell Enterprises http://www.freesimplesoft.com/ Vulnerable Version: 1.0 and probably prior Tested on: 1.0 Vendor Notification: 25 May 2011 Vulnerability...

Google Picasa v3.5 - Local Buffer Overflow Vulnerability

Document Title: =============== Google Picasa v3.5 - Local Buffer Overflow Vulnerability References Source: ==================== OSVDB-ID: 63817 http://osvdb.org/show/osvdb/63817 EDB-ID: 10489 http://www.exploit-db.com/exploits/10489/ Release Date: ============= 2011-06-17 Vulnerability Laborator...

Free Simple CMS 1.0 Cross Site Scripting / Local File Inclusion

Vulnerability ID: HTB23010 Reference: http://www.htbridge.ch/advisory/multiplexssinfreesimplecms.html Product: Free Simple CMS Vendor: Dustin Cowell Enterprises http://www.freesimplesoft.com/ Vulnerable Version: 1.0 and probably prior Tested on: 1.0 Vendor Notification: 25 May 2011 Vulnerability...

FTPRush - Stack Buffer Overflow Vulnerability

Document Title: =============== FTPRush - Stack Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/20.wmv View: http://www.youtube.com/watch?v=Fxr35RAcaUA Release Date: ============= 2011-06-16 Vulnerability Laboratory ID VL-ID:...

ITROM Cart v1.0.x - SQL Injection Vulnerability

Document Title: =============== ITROM Cart v1.0.x - SQL Injection Vulnerability Release Date: ============= 2011-06-15 Vulnerability Laboratory ID VL-ID: ==================================== 114 Product & Service Introduction: =============================== It is a full featured, customizable, w...

Web Browser - Denial of Service Vulnerability

Document Title: =============== Web Browser - Denial of Service Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/26.wmv View: http://www.youtube.com/watch?v=tdHvBYT4w5U Release Date: ============= 2011-06-15 Vulnerability Laboratory ID VL-ID:...

ITROM Cart v1.0.x - SQL Injection Vulnerability

Document Title: =============== ITROM Cart v1.0.x - SQL Injection Vulnerability Release Date: ============= 2011-06-15 Vulnerability Laboratory ID VL-ID: ==================================== 114 Product & Service Introduction: =============================== It is a full featured, customizable, w...

Pacer Edition CMS 2.1 (l param)local file inclusion flaw and fix-vulnerability warning-the black bar safety net

Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 8 6 7 Summary: The 'Pacer Edition' is a Content Management SystemCMS written using PHP 5.2.9 as a minimum requirement. The Pace...

Basic Codebreaking Lesson - Number, ENIGMA, ROT13

Document Title: =============== Basic Codebreaking Lesson - Number, ENIGMA, ROT13 References: =========== Download: http://www.vulnerability-lab.com/resources/videos/13.wmv View: http://www.youtube.com/watch?v=jOsYWvWTBA Release Date: ============= 2011-06-11 Vulnerability Laboratory ID VL-ID:...

Pacer Edition CMS 2.1 - l Local File Inclusion

Pacer Edition CMS 2.1 - l Local File Inclusion Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 867 Summary: The 'Pacer Edition' is a Content Management SystemCMS written using...

Pacer Edition CMS 2.1 (l param) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 867 Summary: The 'Pacer Edition' is a Content Management SystemCMS writte...

Pacer Edition CMS 2.1 Local File Inclusion

Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 867 Summary: The 'Pacer Edition' is a Content Management SystemCMS written using PHP 5.2.9 as a minimum requirement. The Pacer...

Pacer Edition CMS 2.1 (l param) Local File Inclusion Vulnerability

Summary The 'Pacer Edition' is a Content Management SystemCMS written using PHP 5.2.9 as a minimum requirement. The Pacer Edition CMS was based from Website baker core and has been completely redesigned with a whole new look and feel along with many new advanced features to allow you to build sit...

Pacer Edition CMS 2.1 - 'rm' Arbitrary File Deletion

!/usr/bin/python Pacer Edition CMS 2.1 rm Remote Arbitrary File Deletion Exploit Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 867 Summary: The 'Pacer Edition' is a Content Management SystemCMS written using PHP 5.2.9 as a minimum...

Pacer Edition CMS 2.1 - 'l' Local File Inclusion

Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 867 Summary: The 'Pacer Edition' is a Content Management SystemCMS written using PHP 5.2.9 as a minimum requirement. The Pacer...

Dangerous Whitespaces

By Marta Janus A few days ago, I blogged about a PHP/JS malware targeting the osCommerce platform, which used an interesting new technique to obfuscate the malicious code. It so happens, that today I came across even more advanced sample of a PHP infector, also in the context of a vulnerable...