5876 matches found
[SECURITY] [DSA 957-1] New ImageMagick packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 957-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2006 http://www.debian.org/security/faq -...
Design/Logic Flaw
admin.php in QualityEBiz Quality PPC QPPC 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters" to the cpage parameter...
CVE-2006-0216
CVE-2006-0216 affects QualityEBiz Quality PPC (QPPC) 1.0 build 1644. The admin.php cpage parameter can be exploited to reveal sensitive information, potentially the installation path, via unspecified “meta characters.” Connected records confirm the issue as a vulnerability in admin.php with a sim...
CVE-2006-0216
admin.php in QualityEBiz Quality PPC QPPC 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters" to the cpage parameter...
Malicious WMF files stored in Opera’s cache can infect Windows – Opera Security Advisories
Malicious WMF files stored in Opera’s cache can infect Windows – Opera Security Advisories OPCOM Team | January 13, 2006 Summary Windows Meta Files .wmf can contain executable code. A specially craftedWMF file can infect Microsoft Windows with malicious software when it is openedwith Windows’ own...
phpBB Blog 2.2.2 SQL inj. vuln.
phpBB Blog 2.2.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html vendor:http://www.outshine.com/phpbbblog/ affected version:2.2.2 and prior Product Description: This is a blog system for phpBB. It...
Easy Search System v1.1 XSS vuln.
Easy Search System v1.1 XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/easy-search-system-v11-xss-vuln.html vendor:http://www.hotcgiscripts.net/?c=e-search affected version:v1.1 and prior Product Description: Easy Search System is a...
[Full-disclosure] SEC Consult SA-20051202-1 :: GMX Webmail XSS
========================================================== SEC-CONSULT Security Advisory 20051202-0 GMX / MSIE XSS ========================================================== Product: GMX Webmail V ?.? in combination with MSIE maybe other browsers Remarks: no other Versions tested but very likely...
CVE-2002-2169: Undefined Security Weakness
Cross-site scripting vulnerability AOL Instant Messenger AIM 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL...
Shell Command Execution Vulnerability
The remote port seems to be running some form of shell script, with some provided user input. The input is not stripped for such meta characters as SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Possible Bug in PHP-Fusion 6.0.204
There is a Bug in The News-System: Post something like: memetata http-equiv = "refresh" content = "1; URL = http://www.google.com" and you'll be redirected to google. Possible Solution: use a recursive function to filter metatags...
CVE-2001-1512: Undefined Security Weakness
Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages JSP, a variant of CVE-2000-1050...
multihtml.c.exploit.txt
Multihtml.c Security Advisory Pot Kettle Industries Topic: Multihtml.c exploit remote vulnerability Category: Remote for Remote Vendor: bansh33 , r00tabega security labs Announced: 2005-06-10 Credits: Pot Kettle Industries Affects: All Platforms Corrected: N/A URL: http://potkettle.net/advisories...
GLSA-200504-17 : XV: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-17 XV: Multiple vulnerabilities Greg Roelofs has reported multiple input validation errors in XV image decoders. Tavis Ormandy of the Gentoo Linux Security Audit Team has reported insufficient validation in the PDS Planetar...
Debian DSA-695-1 : xli - buffer overflow, input sanitising, integer overflow
Several vulnerabilities have been discovered in xli, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2001-0775 A buffer overflow in the decoder for FACES format images could be exploited by an attacker to execute arbitrary code...
Debian DSA-694-1 : xloadimage - missing input sanitising, integer overflow
Several vulnerabilities have been discovered in xloadimage, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0638 Tavis Ormandy of the Gentoo Linux Security Audit Team has reported a flaw in the handling of compressed images,...
LHa: Multiple vulnerabilities
Background LHa is a console-based program for packing and unpacking LHarc archives. Description The command line argument as well as the archive parsing code of LHa lack sufficient bounds checking. Furthermore, a shell meta character command execution vulnerability exists in LHa, since it does no...
Important: Red Hat Security Advisory: lha security update
An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...
Important: Red Hat Security Advisory: lha security update
An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...
CVE-2004-0479: Undefined Security Weakness
Internet Explorer 6 allows remote attackers to cause a denial of service crash via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference...