SA-CONTRIB-2009-043 - Image Assist - Multiple vulnerabilities

The Image Assist module for Drupal 5.x and 6.x allows users to upload and insert inline images into posts. Two vulnerabilities and weaknesses were discovered in the contributed Image Assist module. Cross site scripting The node title is treated as if it was safe text, and is not escaped before...

Military to Create Cyber Command Unit

From The New York Times Thom Shanker Defense Secretary Robert M. Gates on Tuesday ordered the creation of the military’s first headquarters designed to coordinate Pentagon efforts in the emerging battlefield of cyberspace and computer-network security, officials said. Read the full story...

freebsd/x86-64 exec("/bin/sh") shellcode 31 bytes

No description provided by source. / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec"/bin/sh" Shellcode - 31 bytes Authors: Maycon M. Vitali 0ut0fBound Milw0rm .:...

CVE-2008-6719

U&M Software Event Lister aka JustListIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 start.php, 2 aktivitet.php, 3 propaktivitet.php, 4 kategorier.php, 5 konfig.ph...

Code injection

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

Authentication flaw

U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 usermanual.php, 2 userconfig.php, 3 userkundnamn.php, 4 userkundlista.php, 5...

CVE-2008-6717

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

CVE-2008-6719

The CVE-2008-6719 entry describes U&M Software Event Lister (aka JustListIt) 1.0 as vulnerable because admin/ scripts do not require administrative authentication. The affected components are the admin/ directory scripts (start.php, aktivitet.php, prop_aktivitet.php, kategorier.php, konfig.php, s...

CVE-2008-6717

CVE-2008-6717 affects U&M Software Signup 1.0 and 1.1. The issue is that administrative authentication is not required for all scripts in the admin/ directory, allowing remote attackers to access sensitive admin endpoints (adminstart.php, admineventtype.php, admineventdetails.php, admineventlist....

CVE-2008-6717

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 5492.prm...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 801207.prm...

Directory traversal

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. dot dot in a /CIMListener/ URI in an M-POST request...

CVE-2009-0879

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service daemon crash via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI...

CVE-2009-0880

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. dot dot in a /CIMListener/ URI in an M-POST request...

[USN-732-1] dash vulnerability

=========================================================== Ubuntu Security Notice USN-732-1 March 10, 2009 dash vulnerability CVE-2009-0854 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 This advisor...

Universal Plug and Play (UPnP) Protocol Detection

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' UPnP. This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network...

Den Dating 9.01(searchmatch.php) SQL Injection Vulnerability

No description provided by source. Scripts Den Dating Demo V9.01searchmatch.php SQL Injection Vulnerability Author: nuclear site: http://www.scriptsden.com SQL vuln: http://localhost/path/searchmatch.php?page=2&sortby=username&sortorder=asc&txtgender=M&txtlookgender=F' union select...

StormBoard 1.0.1 SQL Injection

============================================================================== لااله الي لله محمد رسول لله ---------------------------------Samir-M---------------------------------- StormBoard Version 1.0.1 thread.php id= SQL Injection Vulnerability by : Samir-M Msn : [email protected] from: Morocco...

StormBoard 1.0.1 (thread.php id) SQL Injection Vulnerability

No description provided by source. ============================================================================== لااله الي لله محمد رسول لله ---------------------------------Samir-M---------------------------------- StormBoard Version 1.0.1 thread.php id= SQL Injection Vulnerability by : Samir-M...