[SA18533] ELOG Format String and Directory Traversal Vulnerabilities

TITLE: ELOG Format String and Directory Traversal Vulnerabilities SECUNIA ADVISORY ID: SA18533 VERIFY ADVISORY: http://secunia.com/advisories/18533/ CRITICAL: Highly critical IMPACT: Security Bypass, DoS, System access WHERE: From remote SOFTWARE: ELOG 2.x http://secunia.com/product/4657/...

[SA18529] F-Secure Anti-Virus Archive Handling Vulnerabilities

TITLE: F-Secure Anti-Virus Archive Handling Vulnerabilities SECUNIA ADVISORY ID: SA18529 VERIFY ADVISORY: http://secunia.com/advisories/18529/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: F-Secure Personal Express 6.x http://secunia.com/product/688...

[SA18515] TippingPoint IPS Device Denial of Service Vulnerability

TITLE: TippingPoint IPS Device Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18515 VERIFY ADVISORY: http://secunia.com/advisories/18515/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: TippingPoint IPS TOS 2.x http://secunia.com/product/6881/ DESCRIPTION: A...

[Full-disclosure] Oracle Reports - Read parts of files via customize(fixed after 875 days)

Hello FD-Reader It took only 875 days to fix this problem. Summary and additional information concerning the Oracle January 2006 CPU is available here: http://www.red-database-security.com/advisory/oraclecpujan2006.html http://www.red-database-security.com/advisory/oraclereportsreadanyxm lfile.ht...

[SA18459] PDFdirectory SQL Injection Vulnerabilities

TITLE: PDFdirectory SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18459 VERIFY ADVISORY: http://secunia.com/advisories/18459/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PDFdirectory 0.x http://secunia.com/product/6837/ DESCRIPTION: Some...

[SA18469] Netbula Anyboard "tK" Cross-Site Scripting Vulnerability

TITLE: Netbula Anyboard "tK" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18469 VERIFY ADVISORY: http://secunia.com/advisories/18469/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Netbula Anyboard 9.x http://secunia.com/product/2070/ DESCRIPTION:...

[SA18421] Sun Solaris Unspecified Privilege Escalation and Denial of Service

TITLE: Sun Solaris Unspecified Privilege Escalation and Denial of Service SECUNIA ADVISORY ID: SA18421 VERIFY ADVISORY: http://secunia.com/advisories/18421/ CRITICAL: Less critical IMPACT: Privilege escalation, DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/...

[SA18233] Xaraya ADOdb Insecure Test Scripts Security Issues

TITLE: Xaraya ADOdb Insecure Test Scripts Security Issues SECUNIA ADVISORY ID: SA18233 VERIFY ADVISORY: http://secunia.com/advisories/18233/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of system information, System access WHERE: From remote SOFTWARE: Xaraya 1.x...

[SA18372] WebGUI Form Module Script Insertion Vulnerability

TITLE: WebGUI Form Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18372 VERIFY ADVISORY: http://secunia.com/advisories/18372/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: Hans Wolters has...

[SA18392] TheWebForum Script Insertion and SQL Injection Vulnerabilities

TITLE: TheWebForum Script Insertion and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18392 VERIFY ADVISORY: http://secunia.com/advisories/18392/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: TheWebForum 1.x...

secunia-ADOdb.txt

====================================================================== Secunia Research 09/01/2006 - ADOdb Insecure Test Scripts Security Issues - ====================================================================== Table of Contents Affected...

[SA18360] phpChamber "needle" Cross-Site Scripting Vulnerability

TITLE: phpChamber "needle" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18360 VERIFY ADVISORY: http://secunia.com/advisories/18360/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpChamber http://secunia.com/product/6761/ DESCRIPTION: Preddy has...

[SA18283] Discus Error Message Cross-Site Scripting Vulnerability

TITLE: Discus Error Message Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18283 VERIFY ADVISORY: http://secunia.com/advisories/18283/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Discus Freeware 3.x http://secunia.com/product/6725/ Discus...

Secunia Research: TUGZip ARJ Archive Handling Buffer Overflow Vulnerability

====================================================================== Secunia Research 30/12/2005 - TUGZip ARJ Archive Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities

====================================================================== Secunia Research 27/12/2005 - IceWarp Web Mail Multiple File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

VisNetic / Merak Mail Server Multiple Remote Vulnerabilities

The remote host is running VisNetic / Merak Mail Server, a multi- featured mail server for Windows. The webmail and webadmin services included in the remote version of this software are prone to multiple flaws. An attacker could send specially crafted URLs to execute arbitrary scripts, perhaps...

[SA17865] VisNetic Mail Server Multiple Webmail Vulnerabilities

TITLE: VisNetic Mail Server Multiple Webmail Vulnerabilities SECUNIA ADVISORY ID: SA17865 VERIFY ADVISORY: http://secunia.com/advisories/17865/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: VisNetic Mail Server 8.x...

[SA18138] Ingate Firewall and SIParator Denial of Service Vulnerability

TITLE: Ingate Firewall and SIParator Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18138 VERIFY ADVISORY: http://secunia.com/advisories/18138/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Ingate SIParator 4.x http://secunia.com/product/5687/ Ingate...

[Full-disclosure] Secunia Research: Pegasus Mail Buffer Overflow and Off-by-One Vulnerabilities

====================================================================== Secunia Research 20/12/2005 - Pegasus Mail Buffer Overflow and Off-by-One Vulnerabilities - ====================================================================== Table of Contents Affected...

[SA18026] UStore Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: UStore Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18026 VERIFY ADVISORY: http://secunia.com/advisories/18026/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: UStore...