Gadu-Gadu Remote DoS (all versions)

Product: Gadu-Gadu, all available versions including the latest 6.1 build156 Vendor: SMS-EXPRESS.COM http://www.gadu-gadu.pl Impact: Remote Denial of Service Severity: Important Author: Maciej Soltysiak [email protected] Advisory: http://www.soltysiak.com/gg-dos.txt ISSUE It is possible to...

[SA13360] Jakarta Lucene "results.jsp" Cross-Site Scripting Vulnerability

TITLE: Jakarta Lucene "results.jsp" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13360 VERIFY ADVISORY: http://secunia.com/advisories/13360/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jakarta Lucene 1.x http://secunia.com/product/4352/...

debian dhcpd, old format string bug

Subject: Debian dhcpd package. http://packages.debian.org/stable/net/dhcp It is vulnerable to the '02 format string bug. http://www.cert.org/advisories/CA-2002-12.html -- -sean...

[SA12835] Ideal BB Multiple Unspecified Vulnerabilities

TITLE: Ideal BB Multiple Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA12835 VERIFY ADVISORY: http://secunia.com/advisories/12835/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Ideal BB 1.x http://secunia.com/product/1966/...

ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows

Pentest Limited Security Advisory WIDCOMM Bluetooth Connectivity Software Buffer Overflows Advisory Details ---------------- Title: WIDCOMM Bluetooth Connectivity Software Buffer Overflows Announcement date: 11 August 2004 Advisory Reference: ptl-2004-03 CVE Name: CAN-2004-0775 Products: WIDCOMM...

xine 0.99.2 - Remote Stack Overflow

/ $ An open security advisory 6 - Xine vcd MRL input identifier management overflow 1: Bug Researcher: c0ntexatopen-security.org 2: Bug Released: July 28th 2004 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote / Local $ This advisory and/or proof of concept code must not be used for...

[Full-Disclosure] CYBSEC - Security Advisory: Denial of Service in IBM WebSphere Edge Server

The following advisory is also available in pdf for download at http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Denial of Service in WebSphere Edge Server. Vulnerability Class: Denial of Service Release Date: June 2nd 2004 Affected...

WebCT Campus Edition 4.1 - Cross site scripting using CSS @import

Name: WebCT Campus Edition 4.1 - Cross site scripting using CSS @import Release date: 2004/03/29 Application: WebCT Campus Edition 4.1 4.1.1.5, possibly others Vendor URL: http://www.webct.com/ WebCT Inc. Author: Simon Boulet simon boulet divahost net Legal Notice: -------------------- This...

nextplace.txt

Software: NextPlace.com E-Commerce ASP Engine Vendor: http://www.nextplace.com/ Versions: Single version was created Bug: Cross Site Scripting Risk: Medium E-Commerce makes this irregular Exploitation: Remote with browser Date: 24 Jan 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected]...

quikstore.txt

Indonesia Security Development Team Advisory QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users ===================================================================== Advisory Name: QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users Release Date:...

R7-0016: Sybase ASE 12.5 Remote Password Array Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0016 Sybase ASE 12.5 Remote Password Array Denia...

[Full-Disclosure] UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : CDE libDtHelp buffer overflow

To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : CDE libDtHelp buffer overflow Advisory number: CSSA-2003-SCO.31 Issue date: 2003 October 31 Cross reference: sr885326 fz528372 erg71244...

Dansie Shopping Cart Discloses Installation Path to Remote Users

Indonesia Security Development Team Advisory Dansie Shopping Cart Discloses Installation Path to Remote Users ================================================================ Advisory Name: Dansie Shopping Cart Discloses Installation Path to Remote Users Release Date: 5:21 AM 10/20/03 Application...

CERT Advisory CA-2003-22 Multiple Vulnerabilities in Microsoft Internet Explorer

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-22 Multiple Vulnerabilities in Microsoft Internet Explorer Original issue date: August 26, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Microsoft Windows systems running...

BAZARR THUG LIFE , DONT READ OR VIRUS INFECT YOU

/ typespeed server =v0.4.1 remote root vulnerability! / / by: bazarr / / [email protected] / / bazarr episode 5 / ---------------------- PREFACE caddis i just be messing wid you man relax --- caddis :No such nick/channel after reading tutorial on html programmering , i have redesigned website it...

XMB 1.8 Partagium cross site scripting vulnerability

Hi! Lotek, a friend of mine, informed me about a cross site scripting bug1 in my XMBforum 1.8.x2: http://www.website.org/xmbforum/member.php?action=viewpro&member=3Cdiv3E3Cfont20color=22red223EMarc3C/font3E3Cscript3Ealert22Ruef22;3C/script3E3C/div3E I sent this information at Apr 25 2003 to...

Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow

Security Advisory Name: Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow System Affected : Microsoft BizTalk Server 2002 Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 05/05/03 Advisory Number: CC040301 Legal Notice: This Advisory is Copyright c 2003 Ces...

xfsdump creates files insecurely on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : xfsdump creates files insecurely Number : 20030404-01-P Date : April 10, 2003 Reference: CVE CAN-2003-0173 Reference: SGI BUG 885222 Fixed in : IRIX 6.5.20 when available or patches 5059 and 5060 - ----------------------- - --- Issu...

Justice Guestbook 1.3 vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: Justice Guestbook 1.3 vulnerabilities product: Justice Guestbook 1.3 vendor: http://www.justice-media.de risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/017.en.txt...

Critical: Red Hat Security Advisory: : Updated kerberos packages available

A remotely exploitable stack buffer overflow has been found in the Kerberos v4 compatibility administration daemon distributed with the Red Hat Linux krb5 packages. Kerberos is a network authentication system. A stack buffer overflow has been found in the implementation of the Kerberos v4...