PT-2009-13: TinX CMS SQL Injection Vulnerability

TinX CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

Gentoo Security Advisory GLSA 200606-04 (tor)

The remote host is missing updates announced in advisory GLSA 200606-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery

====================================================================== Secunia Research 06/06/2008 - Akamai Red Swoosh Cross-Site Request Forgery Vulnerabilities - ====================================================================== Table of Contents Affected...

PT-2008-2221 · Apple +1 · Cups +1

Name of the Vulnerable Software and Affected Versions: CUPS versions prior to 1.1.22 Description: A memory leak issue allows remote attackers to cause a denial of service, resulting in memory consumption and daemon crash, by sending a large number of requests to add and remove shared printers...

Debian Security Advisory DSA 1250-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 1250-1. It was discovered that cacti, a frontend to rrdtool, performs insufficient validation of data passed to the cmd script, which allows SQL injection and the execution of arbitrary shell commands. OpenVAS Vulnerability...

Debian Security Advisory DSA 1343-1 (file)

The remote host is missing an update to file announced via advisory DSA 1343-1. OpenVAS Vulnerability Test $Id: deb13431.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1343-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

PT-2007-5736 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.22 Description: The issue is related to the improper validation of the hop-by-hop IPv6 extended header in the ipv6 hop jumbo function. This allows remote attackers to cause a denial of service, resulting in ...

Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date...

PHP GD扩展访问已释放资源漏洞

PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP GD资源使用的机制上存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。...

SendStudio 2004.14 - ROOTDIR Remote File Inclusion

SendStudio 2004.14 - ROOTDIR Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV66$2007 ----------------------------------------------------------------------------------------- ECHOADV66$2007 SendStudio = 2004.14 Remote File Inclusion...

Opera security advisory 2004-12-10 – Opera Security Advisories

Opera security advisory 2004-12-10 – Opera Security Advisories OPCOM Team | February 9, 2007 Opera security advisory Named frames or windows can be hi-jacked by malicious frames or windows. Periods in the file name and non-breaking spaces in the Content-Type header can make the save/open dialog...

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (1)

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 1 / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 25\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

streamripper-2.txt

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 29\08\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

[SA20969] eBay Enhanced Picture Services ActiveX Control Buffer Overflow

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

[SA20436] PyBlosxom Contributed Packages Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SECURITY] [DSA 1016-1] New evolution packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1016-1 [email protected] http://www.debian.org/security/ Martin Schulze March 23rd, 2006 http://www.debian.org/security/faq -...

SUSE-SA:2006:004: phpMyAdmin

The remote host is missing the patch for the advisory SUSE-SA:2006:004 phpMyAdmin. Stefan Esser discovered a bug in in the registerglobals emulation of phpMyAdmin that allowes to overwrite variables. An attacker could exploit the bug to ultimately execute code CVE-2005-4079. Additionally several...

secunia-ADOdb.txt

====================================================================== Secunia Research 09/01/2006 - ADOdb Insecure Test Scripts Security Issues - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Webroot Desktop Firewall Two Vulnerabilities

====================================================================== Secunia Research 06/10/2005 - Webroot Desktop Firewall Two Vulnerabilities - ====================================================================== Table of Contents Affected...

Fedora Core 3 : ncpfs-2.2.4-4.FC3.1 (2005-435)

Fri Jun 17 2005 Jiri Ryska 2.2.4-4.FC3.1 - fixed getuid security bug CVE-2005-0014 - fixed security bug CVE-2004-1079 - Mon Apr 11 2005 Jiri Ryska 2.2.4-4.FC3 - fixed getuid security bug CVE-2005-0013 Note that Tenable Network Security has extracted the preceding description block directly from...