DSECRG-08-015.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-015 Application: Dokeos E-Learning System Versions Affected: 1.8.4 Vendor URL: http://dokeos.com Bugs: Multiple SQL Injections,Multiple Blind SQL Injections,Multiple XSS, etc. Exploits: YES Reported: 25.01.2008 Vendor response: 28.01.2008...

[DSECRG-08-008] Textpattern 4.0.5 Multiple Security Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-008 Application: Txp CMS Versions Affected: 4.0.5 Vendor URL: http://www.textpattern.com Bugs: DOS, multiple XSS, etc. Exploits: YES Reported: 11.01.2008 Vendor response: 14.01.2008 Patch Released: 03.02.2008 Date of Public Advisory:...

PT-2008-09: Microsoft Windows MSMQ Privilege Escalation Vulnerability

Positive Technologies Research Team has discovered a privilege escalation vulnerability in Windows Message Queuing service MSMQ. The IOCTL handler in mqac.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system or execute arbitrary...

Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities

H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID : HSEC20071012 General Information -------------------------- Name : Falt4Extreme CMS RC4 10.9.2007 Vendor HomePage :http://sourceforge.net/projects/falt4/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Errors...

Falt4 CMS RC4 10.9.2007 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= Falt4 CMS RC4 10.9.2007 Multiple Remote Vulnerabilities ======================================================= H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID ...

Fedora 7 : phpMyAdmin-2.11.2.1-1.fc7 (2007-3627)

Tue Nov 20 2007 Mike McGrath 2.11.2.1-1 - Upstream released new version - Mon Oct 29 2007 Mike McGrath 2.11.2-1 - upstream released new version - Mon Oct 22 2007 Mike McGrath 2.11.1.2-1 - upstream released new version - Thu Sep 6 2007 Mike McGrath 2.11.0-1 - Upstream released new version -...

psm-rfi.txt

PhpSiteManager-Beta2 Remote File Inclusion Vulnerability Version Released 2007-05-01 ------------------| Timeline:10:11:07 | ------------------| Download : --------------------------------------------------------------------------------------------------------|...

autoindex-xss.txt

====================================================================== AutoIndex Impact: Cross Site Scripting Denial of Service DoS Status: patch available ------------------------------ Affected software description: ------------------------------ Application: AutoIndex Version:...

Directory traversal flaw in shttp

The most recent version of this advisory including any updates is available at: http://www.digineo.co.uk/shttpdirectorytraversal Directory Traversal Flaw in shttp --------------------------------- Affected product: shttp Product vendor: Vito Caputo - http://serverkit.org/modules/contrib/shttp/...

S21SEC-038-en.txt

S21Sec Advisory - Title: Alcatel Omnivista 4760 Cross-Site Scripting ID: S21SEC-038-en Severity: Medium - History: 10.Jun.2007 Vulnerability discovered 20.Jun.2007 Vendor contacted 19.Oct.2007 Advisory released Authors: Juan de la Fuente Costa [email protected] Pablo Seijo Cajaraville...

Team SHATTER Advisory: IBM DB2 Buffer overflow in sysproc.auth_list_groups_for_authid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory IBM DB2 Buffer overflow in sysproc.authlistgroupsforauthid August 31st 2007 Risk Level: High Affected versions: DB2 9.1 Fixpack 2 Enterprise server edition Remote exploitable: Yes Credits: This vulnerability wa...

EVA-Web 1.1 < 2.2 - 'index.php3' Remote File Inclusion

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title EVA-Web 1.1=2.2 Remote File Inclusion Note A patch was released some time ago..but there was never an exploit released.. Script Download...

CYBSEC Pre-Advisory: SAP TRUSTED_SYSTEM_SECURITY RFC Function Information Disclosure

The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisorySAPTRUSTEDSYSTEMSECURITYRFCFunctionInformationDisclosure.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP TRUSTEDSYSTEMSECURITY RFC Function Information Disclosure...

CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service

The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisorySAPRFCSETREGSERVERPROPERTYRFCFunctionDenialofService.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP RFCSETREGSERVERPROPERTY RFC Function Denial Of Service...

woltlab236-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: Woltlab Burning Board wbb | Version: 2.3.6 others not testet | Vuln./Exploit Type:...

kiwicat-exec.txt

Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn't properly verify filename in PUT and GET request which can be used to download/upload any file from/to...

INFINICART - browse_group.asp?groupid SQL Injection

INFINICART - browsegroup.asp?groupid SQL Injection source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...

Solaris 9 (sparc) : 113175-10

Performance Suite 4.0 Solaris 9 Patch. Date this patch was last updated by Sun : Jul/01/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Punbb &lt;= 1.2.13 Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -= PunBB = 1.2.13 Multiple Vulnerabilities =- Written on : 2006/10/10 Released on : 2006/10/29 Author : Nms nms at wargan dot org Affected application : PunBB = 1.2.13 Type of vulnerability : SQL Injection and Local File Inclusion Required PHP...

[KAPDA::#61] - PacPoll &lt;= 4.0 Multiple Vulnerabilities

KAPDA New advisory Vulnerable product : PacPoll = 4.0 Vendor: http://www.pacosdrivers.com/asp/poll/poll.asp Vulnerability: Admin Logon bypass , SQLInjection Date : -------------------- Found : 2006/10/10 Vendor Contacted : N/A Release Date : 2006/10/25 Vulnerabilities: -------------------- Admin...