IF-CMS multiples XSS vunerabilities

vendor site: http://www.rhadrix.com/ risk : low xss = /index.php?rns=/titlescriptalertdocument.cookie/script full path array /index.php?rns= /index.php?pag= benjamin mosse & laurent gaffie http://s-a-p.ca/...

Linux Kernel S/390 copy_from_user本地信息泄露漏洞

Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel实现上存在漏洞，本地攻击者可能利用此漏洞导致内核内存泄露。 如果接收到了无效的用户空间地址的话，Linux的copyfromuser函数就无法正确地清除内核缓冲区。这允许攻击者通过从无效的地址附加文件导致读取未初始化的内核内存。这个漏洞仅影响s390架构。 Linux kernel 2.6.19-rc1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Linux Kernel 2.2 (TCP/IP Weakness) Exploit

No description provided by source. / Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE IT AT YOUR OWN RSIK! THIS PROGRAM IS LICESED UNDER THE GPL and belongs to a security- advisory of team teso. You should get the full advisory with...

Debian DSA-1184-2 : kernel-source-2.6.8 - several vulnerabilities

This advisory covers the S/390 components of the recent security update for the Linux 2.6.8 kernel that were missing due to technical problems. For reference, please see the text of the original advisory. Several security related problems have been discovered in the Linux kernel which may lead to...

Debian DSA-1018-2 : kernel-source-2.4.27 - several vulnerabilities

The original update lacked recompiled ALSA modules against the new kernel ABI. Furthermore, kernel-latest-2.4-sparc now correctly depends on the updated packages. For completeness we're providing the original problem description : Several local and remote vulnerabilities have been discovered in t...

DSA-1184-2 kernel-source-2.6.8 - several vulnerabilities

Bulletin has no description...

CVE-2006-4921

CVE-2006-4921: PHP remote file inclusion in Site@School (S@S)

CVE-2006-4920

CVE-2006-4920 : Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php and (2) starnet/themes/editable/main.inc.php.

CVE-2006-4922

CVE-2006-4922 describes an unrestricted file upload in Site@School (S@S) 2.4.02 and earlier, specifically in starnet/editors/htmlarea/popups/images.php. The vulnerability enables remote attackers to upload and execute arbitrary files with executable extensions. The available documents identify th...

CVE-2006-4016

Cross-site scripting XSS vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter...

mgm095.txt

---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR ---------------------------------------------------- si...

coppermine122.txt

---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities

---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities

---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR ---------------------------------------------------- si...

Mambo MGM Component <= 0.95r2 Remote Inclusion Vulnerability

No description provided by source. ---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Mambo MGM Component <= 0.95r2 Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ Mambo MGM Component = 0.95r2 Remote Inclusion Vulnerability ============================================================ ---------------------------------------------------- Mamb...

Mambo Component MGM 0.95r2 - Remote File Inclusion

Mambo Component MGM 0.95r2 - Remote File Inclusion ---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Mambo Component MGM 0.95r2 - Remote File Inclusion

---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR ---------------------------------------------------- si...

[SECURITY] [DSA 1111-2] New Linux kernel 2.6.8 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1111-2 [email protected] http://www.debian.org/security/ Dann Frazier July 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1111-1] New Linux kernel 2.6.8 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1111-1 [email protected] http://www.debian.org/security/ Dann Frazier Jul 16th, 2006 http://www.debian.org/security/faq -...