iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20

iSEC Partners Security Advisory - 2008-002-lenovornr https://www.isecpartners.com -------------------------------------------- Lenovo Rescue and Recovery Local Kernel Overflow Vendor: Lenovo Vendor URL: http://www.lenovo.com Versions affected: 4.20 Systems Affected: Windows XP, Windows Vista...

pluck-xss.txt

---------------------------------------------------------------- Script : Pluck 4.5.2 Type : Multiple Cross Site Scripting Vulnerabilities Alert : Medium ---------------------------------------------------------------- Download From : http://www.pluck-cms.org/downloads/pluck-452.tar.gz...

wp-saltcrack.txt

WORDPRESS 2.5 - SALT CRACKING VULNERABILITY ------------------------------------------- http://xiam.menteslibres.org/pages/advisories/wordpress-2-5-salt-cracking-vulnerability By J. Carlos Nieto http://xiam.menteslibres.org Severity ======== Medium. It affects only a determinate part of the...

eTicket 'index.php' Cross Site Scripting Path Vulnerability

eTicket 'index.php' Cross Site Scripting Path Vulnerability Name: eTicket 'index.php' Cross Site Scripting Path Vulnerability Application: eTicket Versions Affected: 1.5.6-RC4 Severity: Medium Vendor: eTicket, http://sourceforge.net/projects/eticket Bug: XSS Path vulnerability Exploitation: Clien...

Sophos Anti-Virus 6.5.4 Vulnerability

Name Cross Site Scripting Vulnerability in Sophos Anti-Virus Systems Affected Sophos Anti-Virus, version 6.5.4 R2 Severity Medium Category Cross Site Scripting Author Context Information Security Ltd Advisory 6th September 2007 Description ----------- A ZIP archive containing a virus signature wi...

pandaav-local.txt

/ Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/ Affected Products: Panda Antivirus 2008 Not Affected Products: - Panda...

PR07-18: Cross-site Scripting (XSS) / HTML injection on Webbler CMS admin login page (1)

PR07-18: Cross-site Scripting XSS / HTML injection on Webbler CMS admin login page 1 This advisory has been published following consultation with UK CPNI formerly known as NISCC Date Found: 14th June 2007 Successfully tested on: Webbler CMS version 3.1.3. Earlier versions are possibly affected as...

b2evolution.txt

Security Advisory Severity: Medium Title: b2evolution XSS Vulnerability Date: 28.11.06 Author: tarkus tarkus at tiifp dot org Web: https://tiifp.org/tarkus Vendor: b2evolution http://b2evolution.net/ Affected Products: b2evolution 1.8.2 - 1.9 beta - - - - - - - - - - - - - - - - - - - - - - - - -...

b2evolution XSS Vulnerabilities

Security Advisory Severity: Medium Title: b2evolution XSS Vulnerability Date: 28.11.06 Author: tarkus tarkus at tiifp dot org Web: https://tiifp.org/tarkus Vendor: b2evolution http://b2evolution.net/ Affected Products: b2evolution 1.8.2 - 1.9 beta - - - - - - - - - - - - - - - - - - - - - - - - -...

vcap.txt

title: vCAP calendar server Multiple vulnerabilities Author: securma massine MorX Security Research Team http://www.morx.org Product info : vCAP www.pscs.co.ukis a network calendar server for Windows. vCAP allows user to create calendars which can be viewed and modified by people on network using...

HYSA-2006-008.txt

------------------------------------------------------ HYSA-2006-008 h4cky0u.org Advisory 017 ------------------------------------------------------ Date - Wed May 17 2006 TITLE: ====== myBloggie 2.1.3 CRLF & SQL Injection SEVERITY: ========= Medium SOFTWARE: ========= myBloggie 2.1.3...

CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC (Business Connector)

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryArbitraryFileReadorDeleteinSAPBC.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Arbitrary File Read/Delete in SAP BC Business Connector Vulnerability Class: Improper Input...

HYSA-2006-007-phpmyfamily.txt

------------------------------------------------------ HYSA-2006-007 h4cky0u.org Advisory 016 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== phpmyfamily v1.4.1 CRLF injection & XSS SEVERITY: ========= Medium SOFTWARE: ========= phpmyfamily v1.4.1...

HYSA-2006-005.txt

------=Part594911148151.1141837505833 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline ------------------------------------------------------ HYSA-2006-005 h4cky0u.org Advisory 014...

[Full-disclosure] HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit

------------------------------------------------------ HYSA-2006-005 h4cky0u.org Advisory 014 ------------------------------------------------------ Date - Wed March 08 2006 TITLE: ====== WordPress 2.0.1 Remote DoS Exploit SEVERITY: ========= Medium SOFTWARE: ========= Wordpress 2.0.1 and prior...

bbXSS.txt

Blockbuster XSS Vulnerability ============================= Discovered By: Matthew Benenati Release Date: 2/20/2006 Severity: Medium A cross-site scripting vulnerability exists on Blockbuster.com, a popular online DVD rental service. Example:...

XSS vulnerability in guestbook-php-script

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- SySS-Advisory: XSS-vulnerability in guestbook-php-script - ------------------------------------------------------------------- Problem discovered: February 3d 2006 Vendor contacted:...

MSIEDoS.txt

Advisory Name MicrosoftR Internet Explorer 5 & 6 Remote Denial of Service DoS using IMG & XML elements Release Date 14. January 2006 Vulnerable Product MicrosoftR Internet Explorer 5 MicrosoftR Internet Explorer 6 Tested and Confirmed Vulerable Microsoft® Windows® XP Professional with Service Pac...

[Full-disclosure] [ACSSEC-2005-11-27-0x1] Eudora Qualcomm WorldMail 3.0 IMAP4 Servi ce 6.1.19.0

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Buffer Overflow ID: ACSSEC-2005-11-27 - 0x1 Class: Buffer Overflow Package: Eudora Qualcomm WorldMail 3.0 IMAP4 Service 6.1.19.0 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec 21,...

[Full-disclosure] [ACSSEC-2005-11-25-0x5] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Format String Overflow ID: ACSSEC-2005-11-25 - 0x5 Class: Format String Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 POP3 Service Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Release...