CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

[SECURITY] Fedora 15 Update: quake3-1.36-11.svn2102.fc15

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

[SECURITY] Fedora 14 Update: quake3-1.36-11.svn2102.fc14

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

Richard Thieme Got Dark

Richard Thieme, the Obi-Wan Kenobi of the security community holds forth during his Black Hat talk: “Staring into the Abyss: The Dark Side of Security and Professional Intelligence.” Thieme, an IT security consultant and published author, had a tough message, telling them that the world is “grey...

CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

DEBIAN-CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

UBUNTU-CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

Code injection

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

CVE-2011-1412

CVE-2011-1412 affects the ioQuake3 engine’s Unix/Linux build used by World of Padman 1.5.x (before 1.5.1.1) and OpenArena 0.8.x-15/0.8.x-16. The vulnerability resides in sys/sys_unix.c where a long fs_game variable can be tainted with shell metacharacters, allowing a remote game server to execute...

Indonesia Web Design (link-directory.php?cid) (link-directory.php?pid) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Indonesia Web Design link-directory.php?cid link-directory.php?pid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.webhostingbali.com/ Persian Gulf 4 Ever! Dork : "Powere...

DotComEgypt (products.php?cat_id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability DotComEgypt products.php?catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.dotcomegypt.com/ Persian Gulf 4 Ever! Dork : "Powered by DotCom" "inurl:products.php?catid=...

Design/Logic Flaw

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...

CVE-2011-2779

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...

More Allegations Link Murdoch's Media Empire to "Ethical Hackers"

ED: More Allegations Link Murdoch’s Media Empire to “Ethical Hackers” DEK: New reports add weight to accusations that Rupert Murdoch’s News of the World may have used professional hackers and malicious programs to obtain information that was then used in news reports. The ‘drip drip drip’ of...

Interactive World SQL Injection

Interactive World index.php Sql Injection Vulnerability Multiple Vulnerabilities ============================================================== .:. Exploit Title : Interactive World SQL Injection Vulnerability Multiple Vulnerabilities .:. Author : Netrondoank aka netron .:. My Web :...

Spokane Web Communications SQL Injection

|=----=----=----=----=----=--------=| | | /\ /\ \ /\ /\ \ everythin's black | //\ /\ \ \L\ \ \ \ \ no turning back | \ \ \ \ \ '\ \ \ | \ \ \ \ \ \L\ \ \ \ \ \ Turkish Hacker | \ \ \ / \ \ \ | // // //// | | "I'm Bl4ck.Viper Member Of TBH" | "http://xpl.skote-vahshat.com" |...