[NT] YusASP Web Asset Manager Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

MercurySteam Scrapland Game Server 1.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/12680/info Scrapland game server is reported prone to various denial of service vulnerabilities. These issues present themselves because the application fails to handle exceptional conditions. It is reported that the game server crashes when handling...

Moderate: Red Hat Security Advisory: thunderbird security update

An updated Thunderbird package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Thunderbird is a standalone mail and newsgroup client. A bug was found in the way...

MyPHP Forum 1.0 - SQL Injection

MyPHP Forum 1.0 - SQL Injection /==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit...

MyPHP Forum 1.0 - SQL Injection

/==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit member.php?action=viewpro&member=nonexist' UNION...

DelphiTurk FTP v1.0 Passwords to Local Users Exploit

No description provided by source. / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2: www.spyinstructors.c...

forumKIT.txt

Vulnerable System : forumKIT 1.0 Description : an XSS is founded in the variable members that have the value 'true' you can exchange it with XSS Code . exploit : http://forum.target.com/f.aspx?members="alertdocument.cookie; this exploit is discovered by : neO e-mail : [email protected]...

Debian DSA-606-1 : nfs-utils - wrong signal handler

SGI has discovered that rpc.statd from the nfs-utils package, the Network Status Monitor, did not ignore the 'SIGPIPE'. Hence, a client prematurely terminating the TCP connection could also terminate the server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Jan Erdmann Jebuch 1.0 - HTML Injection

source: https://www.securityfocus.com/bid/11463/info It is reported that Jebuch is susceptible to an HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. This may allow an attacker to inject malicious HTML and script code into t...

Xedus Web Server 1.0 - test.x Username Cross-Site Scripting

Xedus Web Server 1.0 - test.x Username Cross-Site Scripting source: https://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service...

Xedus Web Server 1.0 - Traversal Arbitrary File Access

Xedus Web Server 1.0 - Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple...

Xedus Web Server 1.0 - test.x 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous connections, denying access to the hosted...

Xedus Web Server 1.0 - Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous connections, denying access to the hosted...

linux/x86 execve /bin/sh xor encrypted 55 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 execve /bin/sh xor encrypted 55 bytes =============================================== / .file "xor-encrypted shellcode" .version "1.0" .text .align 4 .globl main .type main,@function...

hafiye.txt

+------- Software --------------+ Hafiye 1.0 "POSIX-compliant, customizable TCP/IP packet sniffer." +------- Tested Versions --------------+ Hafiye1.0 Tested on:LinuxHafiye compiled from tarball FreeBSD 4.7 Installed from CD +------- Vulnerability --------------+ Packet Payload Terminal Escape...

Firebird Database Remote Database Name Overflow

Firebird Database Remote Database Name Overflow ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/unixfocus/5AP0P0UCUO.html SUMMARY http://firebird.sourceforge.net Firebird is "a relational database offering many ANSI SQL-92...

Advisories: CSS in PHP Photo Album by John Beatty ver. 1.0

+-----------------------------+ Advisories: CSS in PHP Photo Album by John Beatty ver. 1.0 Author: nimber [email protected] Date: 4.11.2003 +-----------------------------+ Vendor: John Beatty Version: 1.0 and older versions? +-----------------------------+ Problem: There is a danger of performance...

OpenAutoClassifieds 1.0 - 'Listing' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8972/info It has been reported that OpenAutoClassifieds is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'listings' parameter. The problem may allow a remote...

[EXPL] Chindi DoS Exploit Code

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

GONiCUS System Administrator 1.0 - Remote File Inclusion

GONiCUS System Administrator 1.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/6922/info GONiCUS System Administrator is prone to an issue that may allow remote attackers to include files located on remote servers. This issue is present in several PHP pages existing in the...