[Full-disclosure] firefox 2.0.0.2 crash

Can be dupe but in fast browsing over topics I did not discovered this exploit: http://people.zoy.org/sam/firefox-crash-save-session-before-clicking.gif I do NOT know anything else than this url. Just seen it in random discussion and anyone else I asked knows nothing. Current tests indicate that...

CVE-2007-1325

The PMAArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which allows context-dependent attackers to cause a denial of service web server crash via an array with many dimensions. NOTE: it could be argued tha...

phpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion

No description provided by source. +-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2....

[Full-disclosure] MS06-060 Microsoft Word Memmove Code Execution

McAfee, Inc. McAfee Avert Labs Security Advisory Vendor Notification Date: 2006-07-06 Public Release Date: 2006-10-10 Microsoft Word Memmove Code Execution CVE-2006-3647 Synopsis An integer bug stack overflow exists in the Microsoft Word file format. The file format allows a attacker to create a...

Comdev Photo Gallery 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev Photo Gallery 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Photo Gallery 3.1 + Venedor ...........: http://www.comdevweb.com +...

[KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection

KAPDA::47 - myNewsletter 1.1.2 SQLInjection SQLInjection ------- KAPDA New advisory Vulnerable products : myNewsletter = 1.1.2 Vendor: http://www.aspburst.com/index.asp Risk: Medium Vulnerability: SQLInjection Date : -------------------- Found : 2006/06/05 Vendor Contacted : 2006/06/06 Release Da...

vulnerability details

Release Date: 03/01/2006 Affected Applications: SAP WebAS Kernel up to version 7.00 Affected Platforms: Platform-Independant Local / Remote: Remote Severity: Medium to High Author: A. Grossmann arnold.grossmann at gmail.com Vendor Status: Confirmed Product Overview cited from SAP :...

CVE-2006-1659

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in imagedesc.php, 2 provided parameter in template.php, 3 cid parameter in suggestimage.php, 4 imgid parameter in insertrating.php, and 5 cid parameter i...

[eVuln] E-Blah Platinum 'Referer' XSS Vulnerability

New eVuln Advisory: E-Blah Platinum 'Referer' XSS Vulnerability http://evuln.com/vulns/83/summary.html --------------------Summary---------------- eVuln ID: EV0083 CVE: CVE-2006-0829 Software: E-Blah Platinum Sowtware's Web Site: http://www.eblah.com Versions: 9.7 Critical Level: Moderate Type:...

EV0083.txt

New eVuln Advisory: E-Blah Platinum 'Referer' XSS Vulnerability http://evuln.com/vulns/83/summary.html --------------------Summary---------------- eVuln ID: EV0083 CVE: CVE-2006-0829 Software: E-Blah Platinum Sowtware's Web Site: http://www.eblah.com Versions: 9.7 Critical Level: Moderate Type:...

[eVuln] PHP iCalendar File Inclusion Vulnerability

New eVuln Advisory: PHP iCalendar File Inclusion Vulnerability http://evuln.com/vulns/70/summary.html --------------------Summary---------------- eVuln ID: EV0070 Software: PHP iCalendar Sowtware's Web Site: http://phpicalendar.net/ Versions: 2.0.1 2.1 2.2 Critical Level: Dangerous Type: File...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

[Full-disclosure] rsnapshot Security Advisory 001

============================================================================ rsnapshot Security Advisory 001 [email protected] http://www.rsnapshot.org/security/ Apr 10th, 2005 Nathan Rosenquist ============================================================================ Severity: high...

HP-UX Security patch : PHCO_8654

The remote host is missing HP-UX Security Patch number PHCO8654 . Vulnerability in /usr/lib/expreserve %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16690; scriptversion"1.6";...

HP-UX Security patch : PHKL_9579

The remote host is missing HP-UX Security Patch number PHKL9579 . Vulnerability with direct audio user space code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17117;...

[SA13819] OpenBSD TCP Retransmission Timeout Calculation Denial of Service

TITLE: OpenBSD TCP Retransmission Timeout Calculation Denial of Service SECUNIA ADVISORY ID: SA13819 VERIFY ADVISORY: http://secunia.com/advisories/13819/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: OpenBSD 3.x http://secunia.com/product/100/ DESCRIPTION: A...

[UNIX] vBulletin init.php SQL Injection (specialtemplates)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[Full-Disclosure] Buffer Overflow in Open Dc Hub 0.7.14

Donato Ferrante Application: Open Dc Hub http://opendchub.sourceforge.net/ Version: 0.7.14 Bug: Buffer Overflow Date: 24-Nov-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

dmsPOP3.txt

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

myServer07.txt

myServer 0.7 Directory Traversal Vulnerability .oO Overview Oo. myServer version 0.7 shows files and directories that reside outside the normal web root directory. Discovered on 2004, September 07th Vendor: Myserver http://www.myserverproject.net/forum/portal.php MyServer is a free, powerful web...