PT-2006-7313 · Sugarcrm · Sugarcrm Open Source

Name of the Vulnerable Software and Affected Versions: SugarCRM Open Source versions 4.5.0f and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages. Recommendations: For SugarCRM Ope...

Solaris 2.5.1 (sparc) : 106830-01

The remote host is missing Sun Security Patch number 106830-01 Netra-j 2.1: make ssl module work as client, domestic US only. Date this patch was last updated by Sun : Tue Jan 12 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

PhotoPost 4.6 - 'PP_PATH' Remote File Inclusion

==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

PhotoPost <= 4.6 (PP_PATH) Remote File Include Vulnerability

No description provided by source. ==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

DRUPAL-SA-2006-015: Multiple vulnerabilities in Bibliography

Unescaped input is used directly in queries, allowing malicious users to execute SQL injection attacks. This may result in administrator access. It is also possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to...

Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit

No description provided by source. ?php / Name : Webmin / Usermin Arbitrary File Disclosure Vulnerability Date : 2006-06-30 Patch : update to version 1.290 Advisory : http://securitydot.net/vuln/exploits/vulnerabilities/articles/17885/vuln.html Coded by joffer , http://securitydot.net / $host =...

KLA10398 Vulnerability in NetMeeting

An unspecified vulnerability was found in Microsoft NetMeeting. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed input. Original advisories - Related products...

[SA20431] TIBCO Hawk "tibhawkhma" Privilege Escalation Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

Exploit for unknown platform in category web applications =================================================== Nukedit CMS Kapda HTML PoC For Nukedit Kapda HTML PoC For Nukedit Discovered and coded by 3nitro - farhadkey AT kapda dot ir Change the form's action in source :...

[SA19875] Kerio MailServer Attachment Filter Bypass Vulnerability

TITLE: Kerio MailServer Attachment Filter Bypass Vulnerability SECUNIA ADVISORY ID: SA19875 VERIFY ADVISORY: http://secunia.com/advisories/19875/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Kerio MailServer 6.x http://secunia.com/product/3782/ DESCRIPTION: A...

KLA10086 CI vulnerability in Avant Browser

An unspecified vulnerability was found in the Avant browser. By exploiting this vulnerability malicious users can inject command line arguments. This vulnerability can be exploited remotely with user assistance via a specially designed ‘mailto:’ link. Original advisories - Related products...

PT-2006-1525 · Gnu · Flex

Name of the Vulnerable Software and Affected Versions: flex versions prior to 2.5.33 Description: The issue is related to the allocation of memory for grammars containing REJECT statements or trailing context rules. This causes the generation of code that contains a buffer overflow, which might...

[SA18949] PHP-Fusion Cross-Site Scripting Vulnerabilities

TITLE: PHP-Fusion Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA18949 VERIFY ADVISORY: http://secunia.com/advisories/18949/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Unknown WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291/ PHP-Fusion 5.x...

KLA10267 ACE vulnerability in NJStar Word Processor

A buffer overflow was found in NJStar Word Processor. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via NJX documents. Original advisories - Related products NJStar-Chinese-Word-Processor NJStar-Japanese-Word-Processor CV...

[SA18846] Libapreq2 Unspecified Vulnerability

TITLE: Libapreq2 Unspecified Vulnerability SECUNIA ADVISORY ID: SA18846 VERIFY ADVISORY: http://secunia.com/advisories/18846/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Libapreq2 2.x http://secunia.com/product/8138/ DESCRIPTION: A vulnerability has been reported in Libapreq2...

KLA10152 ACE vulnerability in SFTP

A format string was found in the multiple SFTP products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products SSH-Secure-Shell-for-Workstations F-Secure-SSH-for-Windows...

[SA18589] Kerio WinRoute Firewall Web Browsing Denial of Service

TITLE: Kerio WinRoute Firewall Web Browsing Denial of Service SECUNIA ADVISORY ID: SA18589 VERIFY ADVISORY: http://secunia.com/advisories/18589/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Kerio WinRoute Firewall 6.x http://secunia.com/product/3613/ DESCRIPTION: A vulnerabili...

PT-2006-1288 · Helm · Helm Web Hosting Control Panel

Name of the Vulnerable Software and Affected Versions: Helm Hosting Control Panel versions 3.2.8 and earlier Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the txtEmailAddress parameter in the...

KLA10231 DoS vulnerability in browser

An unspecified vulnerability was found in the browsers. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed web site. Original advisories - Related products Mozilla-Firefox K-Meleon Netscape CVE list...

[SA17528] Campsite MySQL Password Exposure Mail Transfer Security Issue

TITLE: Campsite MySQL Password Exposure Mail Transfer Security Issue SECUNIA ADVISORY ID: SA17528 VERIFY ADVISORY: http://secunia.com/advisories/17528/ CRITICAL: Not critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Campsite 2.x http://secunia.com/product/6091/...