python -- buffer overrun in repr() for unicode strings

Benjamin C. Wiley Sittler reports: I discovered a buffer overrun in repr for unicode strings. This causes an unpatched non-debug wide UTF-32/UCS-4 build of python to abort. Ubuntu security team reports: If an application uses repr on arbitrary untrusted data, this bug could be exploited to execut...

Discloser 0.0.4 - 'fileloc' Remote File Inclusion

| | | discloser 0.0.4 Remote File Inclusion Vulnerability | | Download: http://optusnet.dl.sourceforge.net/sourceforge/discloser/discloser-0.0.4.tar.gz | |Contact| | | Discoverd by: Arash RJ | | Team: PersianFox Digital Security Team | | URL: http://www.PersianFox.com | | E-Mail: [email protected]...

[ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:140 http://www.mandriva.com/security/ Package : ncompress Date : August 9, 2006 Affected: 2006.0, Corporate 3.0 Problem Description: Tavis Ormandy, of the Google Security Team, discovered that ncompress, whe...

Archangel Weblog 0.90.02 and prior Multiple HTML injections

HeLiOsZ - Dark End Team - Internet Security Team Archangel Weblog 0.90.02 and prior Multiple HTML injections IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.archangelmgt.com/ Exploit: - To exploit this issue yo...

blur6ex 0.3 Comment title HTML inyection vuln.

HeLiOsZ - Dark End Team - Internet Security Team blur6ex 0.3 Comment title HTML inyection vuln. IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blursoft.com Exploit: - To exploit this vuln you simply need an...

Virtual War v1.5.0 Remote File Include (vwar_root)

Title : Virtual War v1.5.0 Remote File Include vwarroot Discovered By :::: :::: :::: AG-Spider :::: :::: :::: ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger Application : Virtual War v1.5.0 URL : www.vwar.de...

libTIFF: Multiple vulnerabilities

Background libTIFF provides support for reading and manipulating TIFF images. Description Tavis Ormandy of the Google Security Team discovered several heap and stack buffer overflows and other flaws in libTIFF. The affected parts include the TIFFFetchShortPair, TIFFScanLineSize and...

Vwar v1.5.0 <= Sql Injection and XSS vuln.

IHST Iran HackerZ Security Team WhiteHat Part ------------------------------------------------- Vendor : www.vwar.de vuln. Version = v1.5.0 and lower Credits : MFox Contact : [email protected] HomePage : www.hackerz.ir ------------------------------------------------- Proof of Concept...

NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability

NSFOCUS Security Advisory SA2006-07 ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability Release Date: 2006-07-27 CVE ID: CVE-2006-3840 http://www.nsfocus.com/english/homepage/research/0607.htm Affected systems & software =================== RealSecure Network Sensor...

LinksCaffe30.txt

LinksCaffe 3.0 SQL injection/Command Execution Vulnerabilties Produce : LinksCaffe 3.0 Website : http://gonafish.com/ Impact : manupulation of data / system access Discovered by : Simo64 - Moroccan Security Team + SQL injection 1Vulnerable code in line 223 in links.php code : $rime =...

VanillaCMS.txt

Vanilla CMS = 1.0.1 RootDirectory Remote file inclusion Vuln. Vendor : Vanilla CMS Demo : http://demo.opensourcecms.com/vanilla/ Get Source : http://getvanilla.org/ Vuln type : Remote Risk : High Author : MFox HomePage : Http://hackerz.ir/ Team : IHST Iran HackerZ Security Team Contact :...

[KurdishVanilla CMS <= 1.0.1 (RootDirectory) Remote file inclusion Vuln.]

Vanilla CMS = 1.0.1 RootDirectory Remote file inclusion Vuln. Vendor : Vanilla CMS Demo : http://demo.opensourcecms.com/vanilla/ Get Source : http://getvanilla.org/ Vuln type : Remote Risk : High Author : MFox HomePage : Http://hackerz.ir/ Team : IHST Iran HackerZ Security Team Contact :...

PHP Forge <= 3 beta 2 (cfg_racine) Remote File Inclusion Vulnerability

No description provided by source. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ phpforge3b2cfgracine Remote File Inclusion Vulnerability ------------------------ Virangar Security Team www.virangar.org public www.virangar.net priv8 -------- Discoverd By : Snake...

PHP Forge <= 3 beta 2 (cfg_racine) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== PHP Forge public www.virangar.net priv8 -------- Discoverd By : Snake & hadihadizedehal contact : email protected email protected special tnx 2: A.Nosrati l0pht.Blackho...

PHP Forge 3 Beta 2 - cfg_racine Remote File Inclusion

PHP Forge 3 Beta 2 - cfgracine Remote File Inclusion \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ phpforge3b2cfgracine Remote File Inclusion Vulnerability ------------------------ Virangar Security Team www.virangar.org public www.virangar.net priv8 --------...

FlushCMS <= 1.0.0-pre2 (class.rich.php) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== FlushCMS = 1.0.0-pre2 class.rich.php Remote Inclusion Vulnerability ====================================================================== flushcms tpath Remote File...

FlushCMS 1.0.0-pre2 - class.rich.php Remote File Inclusion

FlushCMS 1.0.0-pre2 - class.rich.php Remote File Inclusion flushcms tpath Remote File Inclusion Vulnerability virangar security team www.virangar.org www.virangar.net Discoverd By : igi contact : [email protected] for all member virangar bug:...

FlushCMS 1.0.0-pre2 - 'class.rich.php' Remote File Inclusion

flushcms tpath Remote File Inclusion Vulnerability virangar security team www.virangar.org www.virangar.net Discoverd By : igi contact : [email protected] for all member virangar bug: ---------------------------------------------------------------------------------------- //language clas...

Lazarus Guestbook Cross Site Scripting Vulnerabilities

Produce : Lazarus Guestbook Website : http://carbonize.co.uk/Lazarus/ Version : = 1.6 Problem : Cross Site Scripting 1 The first probleme is in codes-english.php ,"show" parameter in lang/codes-english.php isn't properly sanitised This can be exploited to execute arbitrary HTML and javascript cod...

[VulnWatch] NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2006-04 Microsoft Office GIF Filter Buffer Overflow Vulnerability Release Date: 2006-07-12 CVE ID: CVE-2006-0007 http://www.nsfocus.com/english/homepage/research/0604.htm Affected systems & software =================== Microsoft Office 2000 Microsoft Office XP Microsof...