[Full-disclosure] Secunia Research: Webroot Desktop Firewall Two Vulnerabilities

====================================================================== Secunia Research 06/10/2005 - Webroot Desktop Firewall Two Vulnerabilities - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: ALZip Multiple Archive Handling Buffer Overflow

====================================================================== Secunia Research 05/10/2005 - ALZip Multiple Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

[SA17023] GNOME libzvt "gnome-pty-helper" Hostname Spoofing

TITLE: GNOME libzvt "gnome-pty-helper" Hostname Spoofing SECUNIA ADVISORY ID: SA17023 VERIFY ADVISORY: http://secunia.com/advisories/17023/ CRITICAL: Not critical IMPACT: Spoofing WHERE: Local system SOFTWARE: GNOME 2.x http://secunia.com/product/3277/ DESCRIPTION: Paul Szabo has reported a...

[SA16934] IPB Riverdark RSS Syndicator Module Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16899] Movable Type Multiple Weaknesses and Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 23/09/2005 - 7-Zip ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

[SA16903] Mall23 eCommerce "idOption_Dropdown_2" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Secunia Research: PowerArchiver ACE/ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 23/09/2005 - PowerArchiver ACE/ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Mozilla Firefox fails to properly sanitize user-supplied URIs via shell script

Overview A lack of input validation in a supplemental shell script included with some Mozilla browsers may allow a remote, unauthenticated attacker to execute arbitrary commands. Description The Linux versions of the Mozilla Firefox and Mozilla Suite web browsers include a wrapper shell script fo...

Secunia Research: Opera Mail Client Attachment Spoofing and ScriptInsertion

====================================================================== Secunia Research 20/09/2005 - Opera Mail Client Attachment Spoofing and Script Insertion - ====================================================================== Table of Contents Affected...

[VulnWatch] ncompress insecure temporary file creation

ncompress insecure temporary file creation Vendor: ftp://ftp.leo.org/pub/comp/os/unix/linux/sunsite/utils/compress/ Advisory: http://www.zataz.net/adviso/ncompress-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary...

Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities

====================================================================== Secunia Research 15/09/2005 - Ahnlab V3 Antivirus Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: AVIRA Antivirus ACE Archive Handling Buffer Overflow

====================================================================== Secunia Research 14/09/2005 - AVIRA Antivirus ACE Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

NOD32 Antivirus ARJ Archive Filename Handling Overflow

The remote host is running NOD32 Antivirus, from eset. The installed version of NOD32 Antivirus is reportedly prone to a heap-based buffer overflow when processing ARJ archives with long filenames. An attacker may be able to exploit this issue to execute arbitrary code on the remote host. C Tenab...

[SA16757] Sun Java System Web Proxy Server Denial of Service Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Secunia Research: NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 08/09/2005 - NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: ALZip ACE Archive Handling Buffer Overflow

====================================================================== Secunia Research 07/09/2005 - ALZip ACE Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

[Full-disclosure] mimicboard2

EXPL-A-2005-013 exploitlabs.com Advisory 042 - - mimicboard2 - AFFECTED PRODUCTS mimicboard2 086 and lower http://www.chitta.com/nobu/download/mimic2 OVERVIEW Mimic2 is a html open forum type of blog, tailored in particular to the Japaneese market and is very popular DETAILS 1. XSS Mimic2 does...

[Full-disclosure] Secunia Research: SqWebMail Conditional Comments Script Insertion Vulnerability

====================================================================== Secunia Research 06/09/2005 - SqWebMail Conditional Comments Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

firefox & mozilla -- command line URL shell command injection

A Secunia Advisory reports: Peter Zelezny has discovered a vulnerability in Firefox, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the shell script used to launch Firefox parsing shell commands that are enclosed within backticks in th...