Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types

Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...

Unfixed XSS vulnerability at www.van-der-wal.be

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting www.van-der-wal.be, which at the time of submission ranked 6847721 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2007. It is...

[Full-disclosure] Firefox/MSIE focus stealing vulnerability - clarification

After some research, I can offer this clarification: 1 The MSIE 7 attack vector I described is a distinctive, new vulnerability that differs from the attack reported by Charles McAuley and Bart van Arnhem. Attacks described by them were fixed in MSIE7 although MSIE6 is still exposed to the origin...

OpenBSD 3.x - 4.0 vga_ioctl() Local Root Exploit

No description provided by source. / Critical Security OpenBSD 3.x-4.0 vgaioctl root exploit Bug had been discovered by allmighty Ilja van Sprundel ilja.netric.org Some code had been stolen from noir's openbsd exploit sources Fix is available:...

CVE-2006-6041

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...

CVE-2006-6041

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...

CVE-2006-6041

This CVE (CVE-2006-6041) describes multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2 and earlier versions up to 3.0.4. The flaw allows an attacker to trigger remote PHP code execution by supplying a URL in the g_include parameter for several...

WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability

No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...

WORK System E-Commerce (g_include) Remote File Inclusion Vulnerability

============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================ Product............: WORK system e-commerce...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================ Product............: WORK system e-commerce...

WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ WORK System E-Commerce .inc"; Vulnerable Files: ------------------ 'index.php' main directory along with many files in the './administration/module' and './module' directories...

Debian DSA-1127-1 : ethereal - several vulnerabilities

Several remote vulnerabilities have been discovered in the Ethereal network sniffer, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3628 Ilja van Sprundel discovered that the FW-1 and MQ dissectors...

CVE-2006-5254

CVE-2006-5254 describes a PHP remote file inclusion in the Mark Van Bellen Detailed User Registration (com_registration_detailed), also known as regdetailed, version 4.1 and earlier. The vulnerability occurs in registration_detailed.inc.php via the mosConfig_absolute_path parameter, enabling an a...

CVE-2006-5254

PHP remote file inclusion vulnerability in registrationdetailed.inc.php in Mark Van Bellen Detailed User Registration comregistrationdetailed, aka regdetailed, 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

EVWD26.txt

World Defacers Team --------------------Summary---------------- eVuln ID: WD26 Vendor: Deparcq Pieter project Dook:- Copyright © 2004 by Deparcq Pieter & Dries Van Thourhout Software: Live Customer Support Solution :- http://www.davidsfonds-roeselare.be/ Class: Remote PoC/Exploit: Available...

DSA-1127 ethereal - several

Bulletin has no description...

CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3832

CVE-2006-3832 affects Loudblog 0.5 and earlier. The vulnerability is an SQL injection in the index.php script where the vulnerable code uses the request parameter id directly in a database query, enabling remote attackers to execute arbitrary SQL commands. The confirmed impact includes potential ...