[eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities

New eVuln Advisory: SaralBlog XSS & Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/40/summary/bt/ Summary Software: SaralBlog Sowtware's Web Site: http://www.saralblog.org/ Versions: 1.0 Critical Level: Moderate Type: Multiple Vulnerabilities Cla

[eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities

New eVuln Advisory: eggblog Multiple SQL Injection & XSS Vulnerabilities http://evuln.com/vulns/39/summary/bt/ Summary Software: eggblog Sowtware's Web Site: http://www.epicdesigns.co.uk/projects/eggblog Versions: 2.0 Critical Level: Moderate Type: Multiple Vul

MyBB 1.0.2 Sniffing table perfix bug in search.php

Summary Software: mybb Sowtware's Web Site: http://mybboard.com Versions: 1.0.2 Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei Risk: low -Description--- mybb has a security bug that allow

[eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure

New eVuln Advisory: RCBlog Directory Traversal & Sensitive Information Disclosure http://evuln.com/vulns/42/summary.html Summary Software: RCBlog Sowtware's Web Site: http://www.fluffington.com/ Versions: 1.0.3 Critical Level: Dangerous Type: Sensitive Informat

[SECURITY] [DSA 946-1] New sudo packages fix privilege escalation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 946-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze January 20th, 2006

[SECURITY] [DSA 947-1] New ClamAV packages fix heap overflow

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 947-1 [EMAIL PROTECTED] http://www.debian.org/security/ Michael Stone January 21st, 2006

MySQL 5.0 information leak?

Hi. I just upgraded to mysql 5.0.18 and started using all those cool new features. :) But concerning VIEWs, I think the information_schema is too verbose to the user. I started creating a VIEW that searches information from several tables, mangles the data and gives the user a clean table with

SUSE Security Announcement: kdelibs3 (SUSE-SA:2006:003)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 __ SUSE Security Announcement Package:kdelibs3 Announcement ID:SUSE-SA:2006:003 Date:

[SECURITY] [DSA 948-1] New kdelibs packages fix buffer overflow

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 948-1 [EMAIL PROTECTED] http://www.debian.org/security/ Moritz Muehlenhoff January 20th, 2005

Re: Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability

> III. Detection > > This problem has been detected and tested on latest versions: > snmptrapd from cmu-snmp-linux-3.7 package > snmptrapd from cmu-snmp-linux-3.6 package This seems to be the following code: int snmp_input(op, session, reqid, pdu, magic) int op; struct snmp_session *sessi

BlogPHP config.php SQL injection login bypass

Summary Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 1(2) Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei -Description--- Vulnerable script

BlogPHP config.php SQL injection login bypass

SELECT level,email,url FROM ".$pre."users WHERE username = '".$_COOKIE[blogphp_username]."' AND password = '".$_COOKIE[blogphp_password]."'" Summary Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 1(2) Type: SQL Injection Class: Remot

Claroline 1.7.2, sso identification vulnerability

hi, this is what we can read in file "/claroline/inc/claro_init_local.inc.php" : [...] $ssoCookieValue = md5( mktime() ); $sql = "UPDATE `".$tbl_sso."` SET cookie= '".$ssoCookieValue."', rec_time = NOW()

DMA[2006-0115a] - 'AmbiCom Bluetooth Object Push Overflow'

I am not sure why but this post appeared to be rejected. DMA[2006-0115a] - 'AmbiCom Bluetooth Object Push Overflow' Author: Kevin Finisterre Vendor: http://www.ambicom.com/products/air2net Product: 'AmbiCom Blue Neighbors <= V2.50 Build 2500' References: http://www.digitalmunition.com/DMA[2006-01

[SECURITY] [DSA 949-1] New crawl packages fix potential group games execution

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 949-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze January 20th, 2006

MDKSA-2006:018 - Updated kernel packages fix several vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDKSA-2006:018 http://www.mandriva.com/security/

[KDE Security Advisory] kjs encodeuri/decodeuri heap overflow

KDE Security Advisory: kjs encodeuri/decodeuri heap overflow vulnerability Original Release Date: 2006-01-19 URL: http://www.kde.org/info/security/advisory-20060119-1.txt 0. References CVE-2006-0019 1. Systems affected: KDE 3.2.0 up to including KDE 3.5.0 2. Overview:

iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability

Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372 January 17, 2006 I. BACKGROUND Cisco IOS Software is the world's leading network infrastructure software, de

iDefense Security Advisory 01.17.06: EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability

EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374 January 17, 2006 I. BACKGROUND EMC Legato NetWorker is a cross-platform backup and recovery application. II. DESCRIPTION Re

iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability

EMC Legato Networker nsrd.exe DoS Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375 January 17, 2006 I. BACKGROUND EMC Legato NetWorker is a cross-platform backup and recovery application. II. DESCRIPTION Remote exploitat

Re: Microsoft knew about the WMF flaw for years

Throughout all this discussion, we should not forget that it was not just Microsoft, but other developers who appear to have implemented and preserved this same WMF functionality over the years, e.g. Wine. The problem might have originated with Microsoft's design choices way back when, but few sub