1738 matches found
DSA-1675-1 phpmyadmin - cross site scripting
Bulletin has no description...
[SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1673-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 29, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1666-1] New libxml2 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1666-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 17, 2008 http://www.debian.org/security/faq -...
[Backports-security-announce] Security Update for virtualbox-ose
Michael Meskes uploaded new packages for virtualbox-ose which fixed the following security problem: Debian Bug 504149 Symlink vulnerability due to bad /tmp handling allowing an attacker to overwrite any files owned by the starting user of virtualbox. For the etch-backports distribution the proble...
[SECURITY] [DSA 1665-1] New libcdaudio packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1665-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 12, 2008 http://www.debian.org/security/faq -...
smb-enum-domains NSE Script
Attempts to enumerate domains on a system, along with their policies. This generally requires credentials, except against Windows 2000. In addition to the actual domain, the "Builtin" domain is generally displayed. Windows returns this in the list of domains, but its policies don't appear to be...
Debian: Security Advisory (DSA-1658-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[Backports-security-announce] Security update for openoffice.org
Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...
[Backports-security-announce] Security update for openoffice.org
Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...
[Backports-security-announce] Security Update for proftpd-dfsg
Francesco Paolo Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2008-4242, Debian Bug 502674 ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF...
[Backports-security-announce] Security Update for proftpd-dfsg
Francesco Paolo Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2008-4242, Debian Bug 502674 ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF...
phpwebgallery-hijackexec.txt
$b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see http://www.securityfocus.com/bid/31398. Only admin can access to the plugins management interface, but the attacker might be able to retrieve a valid...
[SECURITY] [DSA 1654-1] New libxml2 packages fix execution of arbitrary code
------------------------------------------------------------------------ Debian Security Advisory DSA-1654-1 [email protected] http://www.debian.org/security/ Steve Kemp October 14, 2008 http://www.debian.org/security/faq -...
PhpWebGallery <= 1.7.2 Session Hijacking / Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= PhpWebGallery $b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see...
[SECURITY] [DSA 1647-1] New php5 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1647-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 07, 2008 http://www.debian.org/security/faq -...
CVE-2008-4369
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...
Sql injection
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2008-4241
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie...
