[Full-disclosure] Secunia Research: Orion Application Server JSP Source Disclosure Vulnerability

====================================================================== Secunia Research 23/03/2006 - Orion Application Server JSP Source Disclosure Vulnerability - ====================================================================== Table of Contents Affected...

Mercur Mailserver 5.0 SP3 (IMAP) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== Mercur Mailserver 5.0 SP3 IMAP Denial of Service Exploit ========================================================== / Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory :...

Mercur MailServer 5.0 SP3 - 'IMAP' Denial of Service

/ Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory : http://secunia.com/advisories/19267/ Coder : Omnipresent Email : [email protected] Description : Tim Taylor has discovered a vulnerability in Mercur Messaging 2005, which can be exploited by malicious people and by malicious users to cause a...

Mercur MailServer 5.0 SP3 - IMAP Denial of Service

Mercur MailServer 5.0 SP3 - IMAP Denial of Service / Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory : http://secunia.com/advisories/19267/ Coder : Omnipresent Email : [email protected] Description : Tim Taylor has discovered a vulnerability in Mercur Messaging 2005, which can be exploited by...

Mercur Mailserver 5.0 SP3 (IMAP) Denial of Service Exploit

No description provided by source. / Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory : http://secunia.com/advisories/19267/ Coder : Omnipresent Email : [email protected] Description : Tim Taylor has discovered a vulnerability in Mercur Messaging 2005, which can be exploited by malicious people...

[SA19260] monotone "MT" Bookkeeping Directory Arbitrary Lua Code Execution

TITLE: monotone "MT" Bookkeeping Directory Arbitrary Lua Code Execution SECUNIA ADVISORY ID: SA19260 VERIFY ADVISORY: http://secunia.com/advisories/19260/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: monotone 0.x http://secunia.com/product/8767/ DESCRIPTION: A...

IMail IMAP FETCH command buffer overflow

Added: 03/15/2006 CVE: CVE-2005-3526 BID: 17063 OSVDB: 23796 Background IMail is a mail server for Windows including SMTP, IMAP, and LDAP services. Problem A buffer overflow vulnerability in IMail allows remote authenticated attackers to execute arbitrary commands by sending a specially crafted...

[SA19215] Jupiter Content Manager "image" BBcode Script Insertion

TITLE: Jupiter Content Manager "image" BBcode Script Insertion SECUNIA ADVISORY ID: SA19215 VERIFY ADVISORY: http://secunia.com/advisories/19215/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jupiter Content Manager 1.x http://secunia.com/product/8685/...

IMail IMAP FETCH command buffer overflow

Added: 03/15/2006 CVE: CVE-2005-3526 BID: 17063 OSVDB: 23796 Background IMail is a mail server for Windows including SMTP, IMAP, and LDAP services. Problem A buffer overflow vulnerability in IMail allows remote authenticated attackers to execute arbitrary commands by sending a specially crafted...

Secunia Research: unalz Filename Handling Directory Traversal Vulnerability

====================================================================== Secunia Research 13/03/2006 - unalz Filename Handling Directory Traversal Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting

====================================================================== Secunia Research 13/03/2006 - Dwarf HTTP Server Source Disclosure and Cross-Site Scripting - ====================================================================== Table of Contents Affected...

[SA19165] Nodez "op" File Inclusion and Cross-Site Scripting

TITLE: Nodez "op" File Inclusion and Cross-Site Scripting SECUNIA ADVISORY ID: SA19165 VERIFY ADVISORY: http://secunia.com/advisories/19165/ CRITICAL: Highly critical IMPACT: Cross Site Scripting, System access WHERE: From remote SOFTWARE: Nodez 4.x http://secunia.com/product/8640/ DESCRIPTION:...

[SA19155] HitHost Cross-Site Scripting and Directory Deletion

TITLE: HitHost Cross-Site Scripting and Directory Deletion SECUNIA ADVISORY ID: SA19155 VERIFY ADVISORY: http://secunia.com/advisories/19155/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: HitHost 1.x http://secunia.com/product/8604/...

[SA19078] Linux Kernel "die_if_kernel()" Potential Denial of Service

TITLE: Linux Kernel "dieifkernel" Potential Denial of Service SECUNIA ADVISORY ID: SA19078 VERIFY ADVISORY: http://secunia.com/advisories/19078/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: A vulnerabilit...

freeciv -- Packet Parsing Denial of Service Vulnerability

Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error within the handling of the packet length in "common/packets.c". This can be exploited to crash the...

[SA19032] RaidenHTTPD Script Source Disclosure Vulnerability

TITLE: RaidenHTTPD Script Source Disclosure Vulnerability SECUNIA ADVISORY ID: SA19032 VERIFY ADVISORY: http://secunia.com/advisories/19032/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: RaidenHTTPD 1.x http://secunia.com/product/4614/...

4images.txt

----------------- 4images templateextension $template = ""; else $maintemplate = $template; else $template = ""; includeROOTPATH.'includes/pageheader.php'; if !empty$template $clickstream = "urlROOTPATH."index.php".""".$lang'home'."".$config'categoryseparator'.strreplace"", " ", ucfirst$template;...

[SA19039] PunBB "header.php" Cross-Site Scripting Vulnerability

TITLE: PunBB "header.php" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19039 VERIFY ADVISORY: http://secunia.com/advisories/19039/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PunBB 1.x http://secunia.com/product/3700/ DESCRIPTION: A vulnerability...

[Full-disclosure] Secunia Research: NetworkActiv Web Server Script Source Disclosure Vulnerability

====================================================================== Secunia Research 01/03/2006 - NetworkActiv Web Server Script Source Disclosure Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: ArGoSoft Mail Server Pro viewheaders Script Insertion

====================================================================== Secunia Research 27/02/2006 - ArGoSoft Mail Server Pro viewheaders Script Insertion - ====================================================================== Table of Contents Affected...