1693 matches found
RHEL 2.1 / 3 : kdegraphics (RHSA-2006:0648)
Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics package contains graphics applications for the K...
CentOS 3 : kdegraphics (CESA-2006:0648)
Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics package contains graphics applications for the K...
CentOS 3 / 4 : libtiff (CESA-2006:0603)
Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of functions for manipulating TIFF Tagged Image Fil...
RHEL 2.1 / 3 / 4 : libtiff (RHSA-2006:0603)
Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of functions for manipulating TIFF Tagged Image Fil...
EUVD-2006-3765
Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 articles.php, 2 contact.php, 3 displaypage.php, 4 faq.php, 5 mainbody.php, 6 news.php, 7...
CentOS 3 / 4 : freetype (CESA-2006:0500)
Updated freetype packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, and portable font engine. Chris Evans discovered several...
Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability
Digital Armaments advisory is 04.15.2006 http://www.digitalarmaments.com/2006300687985463.html I. Background FlexWATCH is a stand-alone network camera server with built-in CMOS camera and web server which deliver crisp real time live videos at a rate up to 30fps over the network. It is normally...
CentOS 3 / 4 : ethereal (CESA-2005:687)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
CentOS 3 : xscreensaver (CESA-2006:0498)
An updated xscreensaver package that fixes two security flaws is now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. A keyboard focus flaw was found...
CentOS 3 / 4 : libtiff (CESA-2006:0425)
Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of functions for manipulating TIFF Tagged Image Fil...
Hiding Threads from User-mode
Hiding Threads from User-mode KAV's errors with hooking do not end with NtOpenProcess, however. One of the system services KAV hooks is NtQuerySystemInformation. This routine's behavior is modified to sometimes truncate a thread listing from certain processes when the SystemProcessesAndThreads...
RHEL 2.1 / 3 : xscreensaver (RHSA-2006:0498)
An updated xscreensaver package that fixes two security flaws is now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. A keyboard focus flaw was found...
RHEL 4 : libtiff (RHSA-2006:0425)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2006:0425 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. An integer overflow...
Simplog <= 0.9.2 Multiple Vulnerabilities
The remote host is running Simplog, an open source blogging tool written in PHP. The version of Simplog installed on the remote host fails to sanitize input to the 's' parameter of the 'doc/index.php' script before using it in a PHP 'include' function. Provided PHP's 'registerglobals' setting is...
PAJAX Remote Command Execution
RedTeam has identified two security flaws in PAJAX use exploit/unix/webapp/pajax/remoteexec msf undefinedremoteexec show actions ...actions... msf undefinedremoteexec set ACTION msf undefinedremoteexec show options ...show and set options... msf undefinedremoteexec run This module requires...
PHP Live Helper Multiple Remote File Inclusions
The remote host is running PHP Help Live, a commercial web-based real-time help tool written using PHP and MySQL. The version of PHP Help Live installed on the remote host fails to sanitize input to the 'abspath' parameter before using it in various scripts to include files with PHP code. An...
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
nodez 4.6.1.1 mercury - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / software: site:...
Crlf injection
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
PostNuke < 0.762 Multiple Vulnerabilities
The installed version of PostNuke allows an unauthenticated attacker to gain administrative access to select modules through a simple GET request. Additionally, it may be prone to various SQL injection injection or cross-site scripting attacks as well as unspecified attacks through the Languages...
Bugs/Security issues with PatchLink's Update Server
Security Focus, I have been reporting issues to PatchLink Support for two years now with little & no resolution on most of the things I find. Because they are such a large patch management platform I think it is important that they be responsible for their coding practices. But even trying to wor...