WebCT 4.1.5 - Email and Discussion Board Messages HTML Injection

WebCT 4.1.5 - Email and Discussion Board Messages HTML Injection source: https://www.securityfocus.com/bid/28107/info WebCT is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...

FreeBSD : webmin -- XSS vulnerability (12b7286f-16a2-11dc-b803-0016179b2dd5)

Secunia reports : Input passed to unspecified parameters in pamlogin.cgi is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. %NASLMINLEVEL 70300 C Tenable Network...

FreeBSD : c-ares -- DNS Cache Poisoning Vulnerability (70ae62b0-16b0-11dc-b803-0016179b2dd5)

Secunia reports : The vulnerability is caused due to predictable DNS 'Transaction ID' field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Yahoo! Messenger Webcam 8.1 (Ywcupl.dll) Download / Execute Exploit

No description provided by source. / Compile in LCC-win32 Free! Download and exec any file you like! Have Fun! / include stdio.h include string.h include stdlib.h char file = "Clickhere.html"; FILE fp = NULL; unsigned char sc =...

c-ares -- DNS Cache Poisoning Vulnerability

Secunia reports: The vulnerability is caused due to predictable DNS "Transaction ID" field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed...

Re: [Full-disclosure] screen 4.0.3 local Authentication Bypass

-----Original Message----- Subject: Re: Full-disclosure screen 4.0.3 local Authentication Bypass Verified on OpenBSD I'm not seeing a 'Getpass error' message on 4.1-STABLE current, but there does seem to be a problem with locking and reattaching: $ screen space $ echo "This is the locked screen"...

FreeBSD : typo3 -- email header injection (62b8f253-12d9-11dc-a35c-001485ab073e)

Olivier Dobberkau, Andreas Otto, and Thorsten Kahler report : An unspecified error in the internal form engine can be used for sending arbitrary mail headers, using it for purposes which it is not meant for, e.g. sending spam messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Zenturi ProgramChecker ActiveX (sasatl.dll) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== Zenturi ProgramChecker ActiveX sasatl.dll Remote BoF Exploit ==============================================================...

Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow

------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory: http://secunia.com/advisories/25473/ Will Dormann, CERT/CC, is credited with the...

Logitech VideoCall multiple ActiveX controls contain stack buffer overflows

Overview Logitech VideoCall ActiveX controls contain multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Logitech VideoCall is video conferencing software for Windows. Logitech VideoCall includes...

Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow

====================================================================== Secunia Research 23/05/2007 - eScan Products Agent Service Command Decryption Buffer Overflow - ====================================================================== Table of Contents Affected...

Opera Web浏览器Torrent文件处理远程溢出漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera在处理畸形格式的Torrent文件时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 如果用户在Opera中的传输管理器右击了恶意的torrent项的话，就可能触发缓冲区溢出，导致执行任意指令。仅仅点击torrent链接不会触发这个漏洞。 Opera Software Opera Web Browser 9.21 http://secunia.com/advisories/25278/ http://www.opera.com/support/search/view/860/...

Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt2

May 16, 2007 Konstantin Lepikhov 1.3.0rel-alt2 - 1.3.0a stable release. - rollback alt-ltdl patch use alternate variant. - don't delete .la files due ltdlopenext breakage in this case. - remove previous CVE-2006-5815 fixes, use variant from Debian. - change packager. - cleanup obsoleted Conflicts...

Secunia Research: BearShare NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 09/05/2007 - BearShare NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

ACDSee XPM file handling buffer overflow

Added: 05/10/2007 CVE: CVE-2007-2193 BID: 23620 OSVDB: 35236 Background ACDSee is a suite of products for viewing and organizing photos. Problem A buffer overflow vulnerability in the IDX.apl plug-in allows command execution when a user opens a specially crafted XPM file. Resolution Apply a fix...

[Full-disclosure] Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability

====================================================================== Secunia Research 09/05/2007 - Internet Explorer HTML Objects Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

Moderate: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A format...

GLSA-200704-19 : Blender: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200704-19 Blender: User-assisted remote execution of arbitrary code Stefan Cornelius of Secunia Research discovered an insecure use of the 'eval' function in kmzImportWithMesh.py. Impact : A remote attacker could entice a user to...

Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability

====================================================================== Secunia Research 10/04/2007 - Microsoft Agent URL Parsing Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

FreeBSD : WebCalendar -- 'noSet' variable overwrite vulnerability (72999d57-d6f6-11db-961b-005056847b26)

Secunia reports : A vulnerability has been discovered in WebCalendar, which can be exploited by malicious people to compromise a vulnerable system. Input passed to unspecified parameters is not properly verified before being used with the 'noSet' parameter set. This can be exploited to overwrite...