KMail 1.x - GnuPG Arbitrary Content Injection

KMail 1.x - GnuPG Arbitrary Content Injection source: https://www.securityfocus.com/bid/22759/info KMail is prone to a vulnerability that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue to add arbitrary...

GnuPG 1.x - Signed Message Arbitrary Content Injection

GnuPG 1.x - Signed Message Arbitrary Content Injection source: https://www.securityfocus.com/bid/22757/info GnuPG is prone to a weakness that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue in applications...

GnuPG 1.x - Signed Message Arbitrary Content Injection

source: https://www.securityfocus.com/bid/22757/info GnuPG is prone to a weakness that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue in applications using GnuPG to add arbitrary content into a signed and/o...

Gnome Evolution 2.x - GnuPG Arbitrary Content Injection

source: https://www.securityfocus.com/bid/22760/info Evolution is prone to a vulnerability that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue to add arbitrary content into a GnuPG signed and/or encrypted...

CVE-2007-1259: Undefined Security Weakness

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors...

CVE-2006-7097: Undefined Security Weakness

Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors...

CVE-2007-1193: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...

Evading the Norman SandBox Analyzer

Hi all, Summary: The Norman SandBox Analyzer http://sandbox.norman.no/live.html runs malicious code samples in an emulated environment while logging their actions. In practice it is more or less impossible to make an emulated environment perfectly similar to the real thing. It is therefore possib...

CVE-2007-1186: Undefined Security Weakness

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2005-4829: Undefined Security Weakness

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors...

CVE-2007-1039: Undefined Security Weakness

Unspecified vulnerability in Peanut Knowledge Base PeanutKB 0.0.3 and earlier has unknown impact and attack vectors...

Microsoft Internet Explorer 6 - Local File Access

Microsoft Internet Explorer 6 - Local File Access source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker...

Microsoft Internet Explorer 6 - Local File Access

source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...

CVE-2007-0910: Undefined Security Weakness

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...

CVE-2007-0903: Undefined Security Weakness

Unspecified vulnerability in the modrosterodbc module in ejabberd before 1.1.3 has unknown impact and attack vectors...

CVE-2006-7008: Undefined Security Weakness

Unspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related to "securing mosmsg from misuse." NOTE: it is possible that this issue overlaps CVE-2006-1029...

MOAB-29-01-2007.rb.txt

!/usr/bin/ruby c 2006 Lance M. Havok All Rights Reserved. basic proof of concept for MOAB-29-01-2007 require 'digest/sha1' require 'rubygems' require 'net/dns/mdns-sd' bugselected = ARGV0 || "0".toi TMPARR = DNSSD = Net::DNS::MDNSSD trap"INT" puts "++ Exiting..." begin TMPARR.each do |o| o.stop e...

CVE-2007-0423: Undefined Security Weakness

BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact...

CVE-2007-0386: Undefined Security Weakness

Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."...

CVE-2007-0291: Undefined Security Weakness

Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors related to Oracle Exchange, aka APPS02...