SuSE9 Security Update : openldap2 (YOU Patch Number 11135)

This fixes a bug in the Access Control Processing that allowed users with 'selfwrite' access to an attribute to modify arbitrary values of that attribute, instead of just allowing them to add/delete their own DN to/from that attribute. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE9 Security Update : w3m (YOU Patch Number 11376)

A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. CVE-2006-6772 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : squid (YOU Patch Number 12135)

A flaw in a previous previous security update could cause squid to crash under certain circumstances. CVE-2008-1612 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : Python (YOU Patch Number 12046)

Specially crafted images could trigger an integer overflow in the imageop module. CVE-2007-4965 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41186;...

SuSE9 Security Update : libtiff (YOU Patch Number 12229)

A buffer underflow CVE-2008-2327 has been fixed in libtiff. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41236; scriptversion"1.8";...

SuSE9 Security Update : libxml2 (YOU Patch Number 12350)

A previous security fix for libxml2 caused problems when processing large xml files. The patch has been reworked so processing large files works again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : enscript (YOU Patch Number 12349)

Long path names could overflow a buffer in enscript. CVE-2008-5078 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41277; scriptversion"1.9";...

SuSE9 Security Update : fetchmail (YOU Patch Number 12468)

This update of fetchmail improves SSL certificate validation to stop possible man-in-the-middle attacks by inserting \0-character in the certificate's subject name. CVE-2009-2666 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : qt3 (YOU Patch Number 11795)

An off-by-one error in the QUtf8Decoder::toUnicode method has been found which may allow a denial of service attack with specially crafted UTF-8 character sequences that trigger a buffer overflow. CVE-2007-4137 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plug...

SuSE9 Security Update : xscreensaver (YOU Patch Number 12174)

Following security problem is fixed by this patch : - When getpwuid fails due to dropped network on NIS accounts fail instead of silently disabling locking and just blanking. CVE-2008-1683 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : mutt (YOU Patch Number 12505)

This update of mutt improves the handling of the \0 character in SSL certificates. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41326;...

OBOphiX 2.7.0 - fonctions_racine.php Remote File Inclusion

OBOphiX 2.7.0 - fonctionsracine.php Remote File Inclusion OBOphiX fonctionsracine.php = 2.7.0 Remote File Include Vulnerability + Author : EA Ngel + Location : Manado - Indonesia + Situs : wwwdotmanadocodingdotnet + Contact : [email protected] + Download Script :...

Article Directory Blind SQL Injection

-------------------------------------------------------------- Article Directory page.php Remote Blind SQL Injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.yourarticlesdirectory.com Software : Article Directory Thank You Very Mu...

Article Directory - page.php Blind SQL Injection

Article Directory - page.php Blind SQL Injection -------------------------------------------------------------- Article Directory page.php Remote Blind SQL Injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.yourarticlesdirectory.c...

Absolute Form Processor XE-V 1.5 (Auth Bypass) SQL Injection Vuln

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

Absolute Form Processor SQL Injection

----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

YAP 1.1.1 Blind SQL Injection

YAP 1.1.1 Blind SQL Injection/SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Blind SQL Injection The default prefix for database tables is "yap" .But can be changed at installation. PoC : http://127.0.0.1/path/comments.php?imageid=1 and asciisubstringSELECT...

68 Classifieds 4.0 - 'category.php' SQL Injection

Remote SQL Injection Vulnerabilitie 68classifieds category.php Author : HaCkeREgY C0NTACT : [email protected] H^OME : www.PAL-HaCkeR.com & ATSDP.COM Script Name : 68classifieds Buy iT : https://www.68classifieds.com Price : Price: $199.99 ===== D0Rk : You can try ......... D: ===== ExpLO!T :...

teatro 1.6 - basePath Remote File Inclusion

teatro 1.6 - basePath Remote File Inclusion teatro 1.6 Remote File Include Vulnerability Download script : http://telemat.die.unifi.it/book/2003/Telematica-II/teatro-1.6.tgz Dicovered by : Alkomandoz Hacker Contact : [email protected]...

Unfixed XSS vulnerability at you-search.net

Security researcher shadowls, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting you-search.net, which at the time of submission ranked 10096110 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/09/2007. It is...