SuSE 10 Security Update : openssl (ZYPP Patch Number 2082)

This update fixes a bug in OpenSSL that allowed the forgery of some special RSA signatures. CVE-2006-4339 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29541;...

SuSE 10 Security Update : xpdf-tools (ZYPP Patch Number 2474)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

Opera CPU exhaustion

BMP file in special format causes CPU exhaustion...

rayzz-rfli.txt

+By CrackersChild+ Script.......: Rayzz Script 2.0 Download.....: http://rapidshare.com/files/40333745/rayzznew6726.rar Nulled Author.......: CrackersChild | [email protected] & [email protected] Class........: Local File Inclusion Demo.........: http://rayzz.net/rayzzdemo/ ++ ++...

Mp3 ToolBox 1.0 Beta 5 - 'skin_file' Remote File Inclusion

+By CrackersChild+ Script.......: Mp3 ToolBox 1.0 beta 5 Download.....: http://www.radiotoolbox.com/downloads/mp3toolbox/mp3toolboxbeta-5.zip Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File Ä°nclude Vulnerability Dork.........:...

Joomla Component Carousel Flash Image Gallery RFI Vulnerability

No description provided by source. +By CrackersChild+ Script.......: Carousel Flash Image Gallery Joomla Component Download.....: http://justjoomla.net/joomla-components/carousel-flash-image-gallery.html Author.......: CrackersChild | [email protected] & [email protected]...

Ubuntu 5.04 / 5.10 / 6.06 LTS : mailman vulnerabilities (USN-345-1)

Steve Alexander discovered that mailman did not properly handle attachments with special filenames. A remote user could exploit that to stop mail delivery until the server administrator manually cleaned these posts. CVE-2006-2941 Various cross-site scripting vulnerabilities have been reported by...

openSUSE 10 Security Update : CASA (CASA-1849)

Various bugs and problems were fixed in the CASA authentication framework, some of them security relevant : - Secrets with special characters inside were handled incorrectly. - Enhanced Salt generation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

CVE-2007-5250

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allows remote attackers to cause a denial of service server hang via packets containing 0x07 characters or other unspecified invalid...

CVE-2007-5249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allow remote attackers to cause a denial of service daemon crash via a long 1 PBY packet to the YPG server on UDP...

segue-rfi.txt

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

phfito-rfi.txt

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ============================================================= phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion Vuln ============================================================= ============================================ = = =...

PhFiTo 1.3.0 (SRC_PATH) Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

sk.log <= 0.5.3 (skin_url) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================== sk.log = 0.5.3 skinurl Remote File Inclusion Vulnerability ============================================================== ?????????? ??????????????? ??????????????????? ???????????????????????...

Null pointer dereference

Unspecified vulnerability in the strfreectty function in the Special File System SPECFS in Sun Solaris 8 through 10 allows local users to cause a denial of service system panic, related to passing a NULL pointer to the pgsignal function...

CVE-2007-4732

Unspecified vulnerability in the strfreectty function in the Special File System SPECFS in Sun Solaris 8 through 10 allows local users to cause a denial of service system panic, related to passing a NULL pointer to the pgsignal function...

CVE-2007-4732

CVE-2007-4732 describes an unspecified vulnerability in the Solaris SPECFS strfreectty path (SunOS kernel) across Solaris 8–10, where a NULL pointer passed to pgsignal can allow a local user to trigger a denial-of-service (system panic). Connected sources reaffirm the same description; no explici...

CVE-2007-4732: Improper Input Validation

Unspecified vulnerability in the strfreectty function in the Special File System SPECFS in Sun Solaris 8 through 10 allows local users to cause a denial of service system panic, related to passing a NULL pointer to the pgsignal function...

xgb-bypass.txt

/ xGB 2.0 xGB.php Remote Permission Bypass Vulnerability Bug discovered by DarkFuneral http://www.darkfuneral89.altervista.org/ Affected Software: xGB CMS Site: "i don't know! :P" Severity: Critical Description: An attacker can edit all message in xGB Google Dork: allinurl:"xGb.php" E-Mail:...