JustSystems Ichitaro Document Handling Unspecified Code Execution Vulnerability

Description Ichitaro is prone to an unspecified remote code-execution vulnerability. Attackers may exploit this issue to execute arbitrary code within the context of the vulnerable application. Failed attempts will result in a denial-of-service condition. Ichitaro 2008 is vulnerable; other versio...

Core Security Technologies Advisory 2008.0624

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-0624 Advisory URL:...

Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow

====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection "Referer" Header Buffer Overflow - ====================================================================== Table of Contents Affected...

[DSECRG-08-034] Local File Include Vulnerability in Minishowcase v09b136

Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: Minishowcase Image Gallery Versions Affected: v09b136 Vendor URL: http://minishowcase.frwrd.net Bug: Local File Include Exploits: YES Reported: 14.07.2008 Second report: 22.07.2008 Vendor response: NONE Solution: NONE Date...

Wonderware SuiteLink Denial of Service vulnerability

Advisory ID Internal CORE-2008-0129 1. Advisory Information Title: Wonderware SuiteLink Denial of Service vulnerability Advisory ID: CORE-2008-0129 Advisory URL:https://www.coresecurity.com/content/wonderware Date published: 2008-05-05 Date of last update: 2008-05-05 Vendors contacted: Wonderware...

Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow

====================================================================== Secunia Research 08/04/2008 - Lotus Notes kvdocve.dll Path Processing Buffer Overflow - ====================================================================== Table of Contents Affected...

[HISPASEC] 2K7SEPT6 Total Commander 7.01 Remote FTP Client Directory Traversal

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : 2K7SEPT6 Total Commander 7.01 Remote FTP Client Directory Traversal Class : Remote Directory Traversal Threat level : HIGH Discovered : 2007-08-25 Published : 2007-09-06 Credit : Gynvael Coldwind Vulnerable : 7.01 and prior == Abstra...

xdiesel-traverse.txt

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : 2K7SEPT6 X-Diesel Unreal Commander v0.92 build 573 multiple FTP-based vulnerabilities Class : Remote directory traversal, Remote DoS Threat level : HIGH Discovered : 2007-09-06 Published : 2007-08-24 Credit : Gynvael Coldwind...

blizzard-dos.txt

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : Blizzard StarCraft Brood War Remote DoS Class : Remote/Local DoS Threat level : MED Discovered : 2007-08-08 Published : 2007-08-29 Credit : Gynvael Coldwind Vulnerable : StarCraft Brood War 1.15.1 and prior StarCraft 1.15.1 and prior...

Joomla! 1.5 Beta 2 - Search Remote Code Execution

Joomla! 1.5 Beta 2 - Search Remote Code Execution SEC Consult Security Advisory ======================================================================= title: Remote command execution in Joomla! CMS program: Joomla! vulnerable version: 1.5 beta 2 Earlier 1.5 versions may be vulnerable too! impact...

Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities

netVigilance Security Advisory 38 Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities Description: Calendarix is a powerful and easy to use calendar based on PHP and MySQL. It has been developed with ease of use and quick access to information in mind. It provides the user wit...

Trend Micro OfficeScan客户端ActiveX控件远程栈溢出漏洞

Trend Micro OfficeScan是一种针对整个网段的分布式杀毒软件。 OfficeScan企业版Web部署SetupINI ActiveX控件（OfficeScanSetupINI.dll）在显示配置设置列表时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 如果用户受骗访问了恶意站点传送超长属性的话，就会触发这个溢出，导致执行任意指令。 Trend Micro Client/Server/Messaging Security 3.5 Trend Micro Client/Server/Messaging Security 3.0 Trend Micro...

[SA22690] Yazd Discussion Forum Two Security Bypass Issues

TITLE: Yazd Discussion Forum Two Security Bypass Issues SECUNIA ADVISORY ID: SA22690 VERIFY ADVISORY: http://secunia.com/advisories/22690/ CRITICAL: Less critical IMPACT: Security Bypass, Exposure of sensitive information WHERE: From remote SOFTWARE: Yazd Discussion Forum Software 1.x...

ISAA-2006-001.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2006-001 - Original release date: January 09, 2006 - Last revised: January 13, 2006 - Discovered by: Jesus Olmos Gonzalez - Severity: 4/5 ============================================= I. VULNERABILITY...

quickCart.txt

Quick.cart 'sWord' variable XSS and 'iCategory' SQL injection vendor url:http://qc.dotgeek.org/os/index.php?p=productsQuickCart advisore:http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html vendor notify: yes exploit available: yes Quick.cart contais a flaw which can be...

XMLHttpRequest Object security bypass in Opera Web Browser

Overview The Opera Web Browser fails to properly enforce security restrictions on the XMLHttpRequest Object. This may allow a remote, unauthenticated attacker to insert content from potentially malicious web sites. Description The XMLHttpRequest Object is a scripting object that provides routines...

[SA14604] Communigate Pro Unspecified Message Handling Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Communigate Pro Unspecified Message Handling Denial of...

AIX 5.2 : IY44288

The remote host is missing AIX Critical Security Patch number IY44288 Memory overlay in FCP driver. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

[Full-Disclosure] Cross-Site Scripting CuteNews

http://www.swp-zone.org/archivos/advisory-06.txt ------------------------------------------------------------------------------------------------- :.: Cross-Site Scripting CuteNews :.: PROGRAM: CuteNews HOMEPAGE: http://cutephp.com/ VERSION: v1.3.1 BUG: Cross-Site Scripting DATE: 23/05/2004 AUTHO...

myserver043.txt

myServer 0.4.3 Directory Traversal Vulnerability .oO Overview Oo. myServer version 0.4.3 shows files and directories that reside outside the normal web root directory. Discovered on 2003, August, 23th Vendor: Myserver http://myserverweb.sourceforge.net/forum/portal.php MyServer is a free, powerfu...