PHP 5.2.11/5.3.0 Multiple Vulnerability

Exploit for unknown platform in category remote exploits ========================================= PHP 5.2.11/5.3.0 Multiple Vulnerabilities ========================================= Title: PHP 5.2.11/5.3.0 Multiple Vulnerabilities CVE-ID: OSVDB-ID: Author: Maksymilian Arciemowicz Published:...

DreamPoll 3.1 Vulnerabilities

During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes...

DreamPoll 3.1 Vulnerabilities

Exploit for unknown platform in category web applications ============================= DreamPoll 3.1 Vulnerabilities ============================= During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the...

DreamPoll 3.1 - SQL Injection

DreamPoll 3.1 - SQL Injection During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client...

DreamPoll 3.1 SQL Injection / XSS

During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes...

DreamPoll 3.1 Vulnerabilities

No description provided by source. During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a...

DreamPoll 3.1 - SQL Injection

During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes...

Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit

/ camisado.c AKA Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.24.2009 Another long night in ONC RPC fuzzing land... uname -a SunOS unknown 5.10 Generic139555-08 sun4u sparc SUNW,Ultra-510 svcadm restart...

SuSE9 Security Update : libexif (YOU Patch Number 12045)

Two bugs in libexif were identified by a Google Security Audit done by Meder Kydyraliev. - Loading EXIF data could be used to cause a infinite recursion and crash. CVE-2007-6351 - Integer overflows in the thumbnail handler could be used to overflow buffers and potentially execute code or crash a...

WordPress MU 2.7 - HOST HTTP Header Cross-Site Scripting

WordPress MU 2.7 - HOST HTTP Header Cross-Site Scripting ============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored...

Google Gmail Cross Site Request Forgery

============================================= INTERNET SECURITY AUDITORS ALERT 2007-003 - Original release date: August 1st, 2007 - Last revised: January 11th, 2009 - Discovered by: Vicente Aguilera Diaz - Severity: 3/5 ============================================= I. VULNERABILITY...

Joomla/Mambo Component eXtplorer Code Execution Vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-002 - Original release date: January 7th, 2009 - Last revised: March 2nd, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored...

Joomla/Mambo Component eXtplorer Code Execution Vulnerability

Exploit for unknown platform in category web applications ============================================================= Joomla/Mambo Component eXtplorer Code Execution Vulnerability ============================================================= ============================================= INTERNE...

DSA-1526-1 xwine

Bulletin has no description...

Debian Security Advisory DSA 893-1 (acidlab)

The remote host is missing an update to acidlab announced via advisory DSA 893-1. Remco Verhoef has discovered a vulnerability in acidlab, Analysis Console for Intrusion Databases, and in acidbase, Basic Analysis and Security Engine, which can be exploited by malicious users to conduct SQL...

Debian Security Advisory DSA 968-1 (noweb)

The remote host is missing an update to noweb announced via advisory DSA 968-1. Javier Fernández-Sanguino Peña from the Debian Security Audit project discovered that a script in noweb, a web like literate-programming tool, creates a temporary file in an insecure fashion. For the old stable...

Debian Security Advisory DSA 949-1 (crawl)

The remote host is missing an update to crawl announced via advisory DSA 949-1. Steve Kemp from the Debian Security Audit project discovered a security related problem in crawl, another console based dungeon exploration game in the vein of nethack and rogue. The program executes commands insecure...

Debian Security Advisory DSA 684-1 (typespeed)

The remote host is missing an update to typespeed announced via advisory DSA 684-1. OpenVAS Vulnerability Test $Id: deb6841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 684-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SuSE 10 Security Update : libexif5 (ZYPP Patch Number 4883)

One bug in libexif5 was identified by a Google Security Audit done by Meder Kydyraliev. - Integer overflows in the thumbnail handler could be used to overflow buffers and potentially execute code or crash a program using libexif. CVE-2007-6352 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

faqmaster-multi.txt

Security Advisory - - FAQMasterFlexPlus multiple vulnerabilities - --------------------------------------------------------------- Product: FAQMasterFlexPlus Version: Latest version is affected, other not tested Vendor: http://www.netbizcity.com Affected by: Cross-Site Scripting & SQL injection...