[SA21653] PHP-Nuke MyHeadlines Module "myh_op" Cross-Site Scripting

TITLE: PHP-Nuke MyHeadlines Module "myhop" Cross-Site Scripting SECUNIA ADVISORY ID: SA21653 VERIFY ADVISORY: http://secunia.com/advisories/21653/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyHeadlines 4.x module for PHP-Nuke http://secunia.com/product/11722...

[SA21690] Webmin / Usermin Cross-Site Scripting and Source Code Disclosure

TITLE: Webmin / Usermin Cross-Site Scripting and Source Code Disclosure SECUNIA ADVISORY ID: SA21690 VERIFY ADVISORY: http://secunia.com/advisories/21690/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Webmin 1.x...

ZipCentral 4.01 - '.ZIP' File Handling Local Buffer Overflow

/ ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that doesn't include you turb00! Some technical info: -...

[SA21633] Sun Solaris pkgadd Insecure File Permissions

TITLE: Sun Solaris pkgadd Insecure File Permissions SECUNIA ADVISORY ID: SA21633 VERIFY ADVISORY: http://secunia.com/advisories/21633/ CRITICAL: Less critical IMPACT: Manipulation of data, Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/...

[SA21559] SSH Tectia Management Agent Privilege Escalation

TITLE: SSH Tectia Management Agent Privilege Escalation SECUNIA ADVISORY ID: SA21559 VERIFY ADVISORY: http://secunia.com/advisories/21559/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: SSH Tectia Manager 2.x http://secunia.com/product/11677/ DESCRIPTION: A...

[SA21620] AIX mkvg Insecure Program Execution Vulnerability

TITLE: AIX mkvg Insecure Program Execution Vulnerability SECUNIA ADVISORY ID: SA21620 VERIFY ADVISORY: http://secunia.com/advisories/21620/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A security...

[Full-disclosure] Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability

--Security Report-- Advisory: Integramod Portal = 2.x File Inclusion Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/08/06 03:00 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Integramod http://www.integramod.co...

[Full-disclosure] Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability

--Security Report-- Advisory: Integramod Portal = 2.x File Inclusion Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/08/06 03:00 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Integramod http://www.integramod.co...

[SA21584] Empire CMS "check_path" File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[SA21594] SportsPHool "mainnav" File Inclusion Vulnerability

TITLE: SportsPHool "mainnav" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21594 VERIFY ADVISORY: http://secunia.com/advisories/21594/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: SportsPHool 1.x http://secunia.com/product/11629/ DESCRIPTION: Kacper has...

[SA21571] Fantastic News "CONFIG[script_path]" File Inclusion Vulnerability

TITLE: Fantastic News "CONFIGscriptpath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21571 VERIFY ADVISORY: http://secunia.com/advisories/21571/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Fantastic News 2.x http://secunia.com/product/6254/ DESCRIPTION:...

tikiwiki -- multiple vulnerabilities

Secunia reports: Thomas Pollet has discovered a vulnerability in TikiWiki, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the "highlight" parameter in tiki-searchindex.php is not properly sanitised before being returned to the user. This can be...

[Full-disclosure] RealVNC 4.1.2 minor heap corruption/DoS vulnerability (authentication required)

This vulnerability affects the latest version of RealVNC 4.1.2 on all platforms. It is tested on Windows. To exploit the vulnerability, the attacker must either control a connected and authenticated client connected to a vulnerable VNC server or control a VNC server with at least one vulnerable...

[SA21582] PHlyMail Lite "_PM_[path][handler]" File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

zope -- restructuredText "csv_table" Information Disclosure

Secunia reports: A vulnerability has been reported in Zope, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an error in the use of the docutils module to parse and render "restructured" text. This can be exploited to...

FreeBSD : horde -- Phishing and XSS Vulnerabilities (e2e8d374-2e40-11db-b683-0008743bf21a)

Secunia reports : Some vulnerabilities have been reported in Horde, which can be exploited by malicious people to conduct phishing and cross-site scripting attacks. - Input passed to the 'url' parameter in index.php isn't properly verified before it is being used to include an arbitrary website i...

cscope -- Buffer Overflow Vulnerabilities

Secunia reports: Will Drewry has reported some vulnerabilities in Cscope, which potentially can be exploited by malicious people to compromise a vulnerable system. Various boundary errors within the parsing of file lists or the expansion of environment variables can be exploited to cause...

horde -- Phishing and Cross-Site Scripting Vulnerabilities

Secunia reports: Some vulnerabilities have been reported in Horde, which can be exploited by malicious people to conduct phishing and cross-site scripting attacks. Input passed to the "url" parameter in index.php isn't properly verified before it is being used to include an arbitrary web site in ...

[Full-disclosure] Microsoft PowerPoint Malformed Record Memory Corruption

Microsoft PowerPoint Malformed Record Memory Corruption Vulnerability By Sowhat of Nevis Labs 2006.08.08 http://www.nevisnetworks.com http://secway.org/advisory/AD20060808.txt Vendor Microsoft Inc. Microsoft PowerPoint 2000 Microsoft PowerPoint 2002 Microsoft Office PowerPoint 2003 PowerPoint 200...

[SA21375] Torbstoff News "pfad" File Inclusion Vulnerability

TITLE: Torbstoff News "pfad" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21375 VERIFY ADVISORY: http://secunia.com/advisories/21375/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Torbstoff News 4.x http://secunia.com/product/11250/ DESCRIPTION: SHiKaA has...