Adaptive Website Framework 1.11 - Remote File Inclusion

source: https://www.securityfocus.com/bid/18386/info Adaptive Website Framework is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...

Mafia Moblog Full Path Disclosure / SQL injection

Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...

[SA20452] TIBCO Rendezvous HTTP Administrative Interface Buffer Overflow

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA20475] MiraksGalerie Multiple File Inclusion Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA19890] AutoMate unacev2.dll Buffer Overflow Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA20407] F-Secure Products Web Console Buffer Overflow Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA20394] SeaMonkey VCard Double-Free and "addSelectionListener" Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA20408] REDAXO "REX[INCLUDE_PATH]" File Inclusion Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA20364] IBM DCE Two Kerberos Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

Secure Elements Class 5 AVR multiple security vulnerabilities

Sensitive information disclosure and spoofing, protection bypass, DoS, unauthorized system access...

[SA20179] ZipCentral ZIP File Handling Buffer Overflow Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA20165] FrontRange iHEAT Host System Access Vulnerability

TITLE: FrontRange iHEAT Host System Access Vulnerability SECUNIA ADVISORY ID: SA20165 VERIFY ADVISORY: http://secunia.com/advisories/20165/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: FrontRange iHEAT 8.x http://secunia.com/product/10124/ DESCRIPTION: mcdaniel...

[SA20100] FreeType "read_lwfn()" Integer Overflow Vulnerability

TITLE: FreeType "readlwfn" Integer Overflow Vulnerability SECUNIA ADVISORY ID: SA20100 VERIFY ADVISORY: http://secunia.com/advisories/20100/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeType 2.x http://secunia.com/product/10004/ DESCRIPTION: A...

[Full-disclosure] Secunia Research: IZArc unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 17/05/2006 - IZArc unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Eazel unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 17/05/2006 - Eazel unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA20136] FreeFTPd SFTP Key Exchange Algorithm String Buffer Overflow

TITLE: FreeFTPd SFTP Key Exchange Algorithm String Buffer Overflow SECUNIA ADVISORY ID: SA20136 VERIFY ADVISORY: http://secunia.com/advisories/20136/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeFTPd 1.x http://secunia.com/product/6138/ DESCRIPTION: A...

[SA20087] PopPhoto "cfg[popphoto_base_path]" File Inclusion Vulnerability

TITLE: PopPhoto "cfgpopphotobasepath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA20087 VERIFY ADVISORY: http://secunia.com/advisories/20087/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PopPhoto 3.x http://secunia.com/product/9926/ DESCRIPTION: VietMafia h...

[SA20119] TR Newsportal "file_newsportal" Parameter File Inclusion Vulnerability

TITLE: TR Newsportal "filenewsportal" Parameter File Inclusion Vulnerability SECUNIA ADVISORY ID: SA20119 VERIFY ADVISORY: http://secunia.com/advisories/20119/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: TR Newsportal 0.x http://secunia.com/product/9955/...

[SA20115] Php Blue Dragon CMS "vsDragonRootPath" File Inclusion

TITLE: Php Blue Dragon CMS "vsDragonRootPath" File Inclusion SECUNIA ADVISORY ID: SA20115 VERIFY ADVISORY: http://secunia.com/advisories/20115/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Php Blue Dragon CMS 2.x http://secunia.com/product/9942/ DESCRIPTION: Kacper...

[SA20103] ezUserManager "ezUserManager_Path" File Inclusion Vulnerability

TITLE: ezUserManager "ezUserManagerPath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA20103 VERIFY ADVISORY: http://secunia.com/advisories/20103/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: ezUserManager 1.x http://secunia.com/product/5196/ DESCRIPTION:...