Former employee held for hacking server of BPO unit in Hyderabad !

A former software professional on Saturday was arrested for allegedly hacking the server of a city-based BPO company, where he previously worked, police said. The hacker identified as Shaik Mahammad Ghouse Bhasa allegedly secured unauthorised access to the computer systems of M/s IVOICE Network...

FreeBSD : moodle -- multiple vulnerabilities (66759ce6-7530-11df-9c33-000c29ba66d2)

The Moodle release notes report multiple vulnerabilities which could allow cross site scripting, XSS attacks, unauthorised deletion of attempts in some instances. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

IceWarp WebMail Mail Forgery

Advisory: IceWarp WebMail Server: Client-Side Specification of "Forgot Password" eMail Content During a penetration test, RedTeam Pentesting discovered that the emails sent by the IceWarp WebMail Server when using the "Forgot Password" function are generated on the client side. Furthermore, the...

Debian DSA-1488-1 : phpbb2 - several vulnerabilities

Several remote vulnerabilities have been discovered in phpBB, a web-based bulletin board. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0471 Private messaging allowed cross site request forgery, making it possible to delete all private messages of...

DSA-1488-1 phpbb2 - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 766-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 766-1. A vulnerability has been discovered in webcalendar, a PHP based multi-user calendar, that can lead to the disclosure of sensitive information to unauthorised parties. the old stable distribution woody does not...

CVE-2007-4600 - Mathcad Protect Worksheet Vulnerability

Mathcad Security Vulnerability Briefing - CVE-2007-4600 Synopsis of Vulnerability ========================== The ‘Protect Worksheet’ functionality, used to protect sections Mathcad sheets from alterations, in versions 12 through 14 is easily bypassed allowing access to the protected data due to t...

Squiz MySource Matrix Unauthorised Proxy and Cross Site Scripting

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Squiz - My Source and My Source Matrix http://www.squiz.net.au "MySource Matrix is the newest version of the popular MySource CMS, purpose built for enterprise level...

[SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 1047-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 917-1] New courier packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 917-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 790-1] New phpldapadmin packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 790-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2005 http://www.debian.org/security/faq -...

FreeBSD : ecartis -- unauthorised access to admin interface (be543d74-539a-11d9-a9e7-0001020eed82)

A Debian security advisory reports : A problem has been discovered in ecartis, a mailing-list manager, which allows an attacker in the same domain as the list admin to gain administrator privileges and alter list settings. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

[SA15306] Sun StorEdge 6130 Array Unspecified Unauthorised Access

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun StorEdge 6130 Array Unspecified Unauthorised Acces...

CVE-2000-0894

WatchGuard SOHO Firewall HTTP service exposed to the private network allows administrative actions (password reset, reboot) without proper authentication, enabling denial of service or unauthorized activity. The ISS advisory details multiple issues mapped to CAN-2000-0894/0895/0896 across firmwar...

Sympa wwsympa.fcgi Unauthorised List Creation

According to its version number, the installation of Sympa on the remote host has an authentication flaw within the web interface. An attacker, exploiting this flaw, would be able to bypass security mechanisms and perform listmaster functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] [DSA 495-1] New Linux 2.4.16 packages fix local root exploit (arm)

-------------------------------------------------------------------------- Debian Security Advisory DSA 495-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2004 http://www.debian.org/security/faq -...

Gast Arbeiter unauthorized access

It's possible to access file of attackers choice...

CVE-2002-0095

CVE-2002-0095 affects BSCW (Basic Support for Cooperative Work) in its default configuration (3.x and possibly 4) where user self-registration is enabled. This could allow remote attackers to upload files and potentially join a user community that was intended to be closed. The CVSS metrics indic...

PHPMyNewsLetter 0.6.11 - customize.php include problem

Vulnerable : PHPMyNewsLetter 0.6.11 Vulnerability : Unauthorised file access Product URL : http://gregory.kokanosky.free.fr/phpmynewsletter/ Contacted : 4.2.2003 Advisory by Eclipse at packx.net, visit www.packx.net. Description =========== PHPSecure.org's "fix" broke the functionality of...

Netscreen 25 unauthorised reboot issue

Please note that this advisory was prepared, before speaking to Netscreen's US operation. Nothing of this vulnerability has been discussed here or on vun-dev hence this email. Additionally it is not shown on netscreen's security alerts page http://www.netscreen.com/support/alert.html as of...