[Full-disclosure] Secunia Research: Mozilla Firefox XPCOM Event Handling Memory Corruption

====================================================================== Secunia Research 27/07/2006 - Mozilla Firefox XPCOM Event Handling Memory Corruption - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: AutoVue SolidModel Professional Buffer Overflow Vulnerability

====================================================================== Secunia Research 26/07/2006 - AutoVue SolidModel Professional Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[Full-disclosure] Secunia Research: FileCOPA Directory Argument Handling Buffer Overflow

====================================================================== Secunia Research 25/07/2006 - FileCOPA Directory Argument Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: BitZipper unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 17/07/2006 - BitZipper unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: VisNetic Mail Server Two File Inclusion Vulnerabilities

====================================================================== Secunia Research 17/07/2006 - VisNetic Mail Server Two File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

[SA21038] CzarNews "tpath" File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[SA20589] CMS Mundo SQL Injection Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[Full-disclosure] rPSA-2006-0122-1 kernel

rPath Security Advisory: 2006-0122-1 Published: 2006-07-07 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Denial of Service Updated Versions: kernel=/conary.rpath.com@rpl:devel//1/2.6.16.24-0.1-1 References:...

[SA20988] Zope reStructuredText "raw" Directive Information Disclosure

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

WebEx Downloader Plug-in Multiple Vulnerabilities + rant

All these vulnerabilities were reported to WebEx by NGS Software back on the 24th February 2005 along with some other issues. The current Director of the X-Force new about these issues as at the time of their discovery, he worked with NGS. Seeing as I'm the subject, here is another example whereb...

[SA20976] Gimp XCF Parsing Buffer Overflow Vulnerability

---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...

[SA20912] Taskjitsu Task Script Insertion Vulnerabilities

---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...

[SA20936] Vincent LECLERCQ News Cross-Site Scripting and SQL Injection

---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...

MailEnable SMTP AUTH LOGIN buffer overflow

Added: 06/30/2006 CVE: CVE-2005-1781 BID: 13772 OSVDB: 16851 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem The SMTP service in MailEnable is affected by a...

Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities

====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

[SA19480] Opera SSL Certificate "Stealing" Weakness

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

BASE base_qry_common.php file include

Added: 06/23/2006 CVE: CVE-2006-2685 BID: 18298 OSVDB: 25770 Background Snort is an open-source intrusion detection system. The Basic Analysis and Security Engine BASE is a web interface for analyzing Snort results. Problem If the registerglobals PHP option is enabled, the baseqrycommon.php scrip...

secunia-deluxebb.txt

====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

FreeBSD : WebCalendar -- information disclosure vulnerability (09c92f3a-fd49-11da-995c-605724cdf281)

Secunia reports : socsam has discovered a vulnerability in WebCalendar, which can be exploited by malicious people to bypass certain security restrictions and disclose sensitive information. Input passed to the 'includedir' parameter isn't properly verified, before it is used in an 'fopen' call...