[Full-disclosure] [FS-05-02] Multiple vulnerabilities in phpMyAdmin

=============================================================================== Security Advisory http://www.fitsec.com/advisories/FS-05-02.txt Severity: Low/Medium Title: Multiple vulnerabilities in phpMyAdmin Date: 12.11.2005 ID: FS-05-02 Author: Toni Koivunen toni.koivunen at fitsec.com - - - ...

[SA17542] CodeGrrl Products "siteurl" File Inclusion Vulnerability

TITLE: CodeGrrl Products "siteurl" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17542 VERIFY ADVISORY: http://secunia.com/advisories/17542/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PHPCalendar 1.x http://secunia.com/product/6095/ PHPClique 1.x...

[SA17534] Sudo Perl Environment Cleaning Privilege Escalation Vulnerability

TITLE: Sudo Perl Environment Cleaning Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA17534 VERIFY ADVISORY: http://secunia.com/advisories/17534/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sudo 1.x http://secunia.com/product/3929/ DESCRIPTION: A...

[SA17411] YaBB Attachment Script Insertion Vulnerability

TITLE: YaBB Attachment Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17411 VERIFY ADVISORY: http://secunia.com/advisories/17411/ CRITICAL: Moderately critical IMPACT: Unknown, Cross Site Scripting WHERE: From remote SOFTWARE: YaBB 2.x http://secunia.com/product/6070/ DESCRIPTION: A...

Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability

====================================================================== Secunia Research 04/11/2005 - cPanel Entropy Chat Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

[Full-disclosure] ZDI-05-002: Clam Antivirus Remote Code Execution

ZDI-05-002: Clam Antivirus Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-05-002.html November 4th, 2005 -- CVE ID: CAN-2005-3303 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87 -- TippingPointTM IPS Customer Protectio...

[SA17409] Serv-U FTP Server Potential Denial of Service Vulnerability

TITLE: Serv-U FTP Server Potential Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17409 VERIFY ADVISORY: http://secunia.com/advisories/17409/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Serv-U FTP Server 6.x http://secunia.com/product/5878/ DESCRIPTION: A...

PHP -- multiple vulnerabilities

A Secunia Advisory reports: Some vulnerabilities have been reported in PHP, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and potentially compromise a vulnerable system...

secunia-ATutor.txt

====================================================================== Secunia Research 27/10/2005 - ATutor Multiple Vulnerabilities - ====================================================================== Table of Contents Affected Software....................................................1...

secunia-Mantis.txt

====================================================================== Secunia Research 26/10/2005 - Mantis "tcorepath" File Inclusion Vulnerability - ====================================================================== Table of Contents Affected...

Skype URI handling routine contains a buffer overflow

Overview A buffer overflow in Skype may allow a remote attacker to execute code on a vulnerable system. Description Skype software provides telephone service over IP networks. There is a buffer overflow in the routines that handle Skype-specific URIs callto:// or skype://. The buffer overflow may...

flyspray -- cross-site scripting vulnerabilities

A Secunia Advisory reports: Lostmon has reported some vulnerabilities in Flyspray, which can be exploited by malicious people to conduct cross-site scripting attacks. Some input isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script...

[Full-disclosure] Secunia Research: Mantis "t_core_path" File Inclusion Vulnerability

====================================================================== Secunia Research 26/10/2005 - Mantis "tcorepath" File Inclusion Vulnerability - ====================================================================== Table of Contents Affected...

skype -- multiple buffer overflow vulnerabilities

A Secunia Advisory reports: Some vulnerabilities have been reported in Skype, which can be exploited by malicious people to cause a DoS or to compromise a user's system...

Secunia Research: ZipGenius Multiple Archive Handling Buffer Overflow

====================================================================== Secunia Research 21/10/2005 - ZipGenius Multiple Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities

====================================================================== Secunia Research 18/10/2005 - MySource Cross-Site Scripting and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability

====================================================================== Secunia Research 12/10/2005 - Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA17158] WebGUI Unspecified Arbitrary Code Execution Vulnerability

TITLE: WebGUI Unspecified Arbitrary Code Execution Vulnerability SECUNIA ADVISORY ID: SA17158 VERIFY ADVISORY: http://secunia.com/advisories/17158/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: A vulnerability...

[Full-disclosure] Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 11/10/2005 - WinRAR Format String and Buffer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

[SA16852] HAURI Anti-Virus ALZ Archive Handling Buffer Overflow

TITLE: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow SECUNIA ADVISORY ID: SA16852 VERIFY ADVISORY: http://secunia.com/advisories/16852/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HAURI LiveCall http://secunia.com/product/5448/ ViRobot Advanced Server...