Aris AGX agXchange ESM Open Redirection

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 Aris AGX agXchange ESM Open Redirection Vulnerability ========================================= ===================== I. BACKGROUND ===================== E2B safety submissions module. When it comes to the...

IBM Lotus 6.x HTTP Response Splitting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x HTTP Response Splitting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software delivers robust collaboration...

Subversion svn Protocol String Parsing (CVE-2004-0413)

Subversion is a revision control system that handles svn protocol requests. A specially crafted svn request could cause svnserve, the daemon that handles svn protocol requests, to allocate insufficient heap memory and overflow the heap. It is possible for a malicious attacker to run arbitrary cod...

Bo-Blog 2.0.3 background plug horse execute arbitrary commands vulnerability-vulnerability warning-the black bar safety net

| Article source: &&www.slenk.net Article author: lone water around the city Today analyzed under the Bo-Blog 2.0.3 of the code, The event is by this version of the Flyh4t big cow release of a known injection vulnerability. Into the backend crunching for half a day, and looked under the code,...

FreeBSD : freeradius -- authentication bypass vulnerability (1a216dfd-f710-11da-9156-000e0c2e438a)

The freeradius development team reports : A validation issue exists with the EAP-MSCHAPv2 module in all versions from 1.0.0 where the module first appeared to 1.1.0. Insufficient input validation was being done in the EAP-MSCHAPv2 state machine. A malicious attacker could manipulate their...

UBBThreads-md5.txt

UBBThreads 5.x,6.x md5 hash disclosure ------------------------------------------- Using XSS such as the one reported earlier: http://site/ubbpath/index.php?debug=xss will allow you to inject javascript and steal MD5 Hashes from: http://site/ubbpath/editbasic.php The MD5 is automatically included...

PHPResidence <= 0.6 XSS

PHPResidence = 0.6 XSS Discovered by: Nomenumbra Date: 23/5/2006 impact:moderate privilege escalation,possible defacement PHP Residence software doesn't sanitize any of it's input, allowing a malicious attacker providing he/she has an account to inject arbitrary HTML or javascript code Nomenumbra...

YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability

Title : YapBB = 1.2 Beta2 'find.php' SQL Injection Vulnerability ------------------------------------------ Author : x90cKyong Joo, Jung Published : 2006.5.16 E-mail : geinblues at gmail.com Site : http://www.chollian.net/jyj9782 ------------------------------------------ 0x01 Summary YapBB is a...

Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)

Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...

HiveMail-1.3.txt

GulfTech Security Research February 10, 2006 Vendor : HiveMail URL : http://www.hivemail.com/ Version : HiveMail queryfirst" SELECT contacts FROM hivecontactgroup WHERE contactgroupid = $contactgroupid AND userid = $hiveuseruserid ";...

From PHP Forum the vulnerability of the endoscope security management-vulnerability warning-the black bar safety net

From: ReJeCt‘s Blog Blue magic Forum is a PHP Forum in the country is widely used. Due to its user registration module in some code defect that can lead to a malicious attacker will be normal users to elevate to administrator. First let's look at an invasion of the examples. The invasion paradigm...

RHEL 3 : spamassassin (RHSA-2004:451)

An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from incoming email. A denial of service bug has been found in SpamAssassin versions below 2.64. A malicious...

hafiye -- lack of terminal escape sequence filtering

A siyahsapka.org advisory reads: Hafiye-1.0 doesnt filter the payload when printing it to the terminal. A malicious attacker can send packets with escape sequence payloads to exploit this vulnerability. If Hafiye has been started with -n packet count option , the vulnerability could allow remote...

Valve Software Half-Life Dedicated Server 3.1/4.1 - Information Disclosure/Denial of Service

source: https://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to legitimate users of the Half-Life dedicated server. The issue presents itself due to a flaw in...

WebJeff FileManager 1.6 - File Disclosure

source: https://www.securityfocus.com/bid/7995/info A vulnerability has been reported for Filemanager that may result in the disclosure of arbitrary files. The vulnerability exists due to insufficient sanitization of user-supplied values for URI parameters. A malicious attacker can specify...

Inktomi Traffic Server 4.0/5.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/7596/info Inktomi Traffic Server is prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of input passed to the proxy, which will be echoed back in error pages under some circumstances. A malicious attacker could exploit...

Inktomi Traffic Server 4.05.x - Cross-Site Scripting

Inktomi Traffic Server 4.05.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/7596/info Inktomi Traffic Server is prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of input passed to the proxy, which will be echoed back in error pages under...

Outblaze Webmail - Cookie Authentication Bypass

Outblaze Webmail - Cookie Authentication Bypass // source: https://www.securityfocus.com/bid/7115/info Outblaze web mail service has been reported prone to an authentication cookie spoofing vulnerability. This issue may allow a malicious attacker to bypass the cookie-based authentication mechanis...

bash_1.x.txt

Rather dangerous bug is present in output processing after "command substitution" in bash 1.xx. It seems to be NOT present in bash 2.0.x, but I haven't found any bugreport on this vulnerability. I looked for: 'command substitution', 'ff', 'subshell' and '$' CHANGES file, no effects... Seems to be...