This Vulnerability works even when you put your script (<img src="javascript:alert('Executed from ' + top.location)" >) in nickname and you can insert HTML codes in Nickname and Lastname.

[ more ]  [ reply ]

* AdMentor (banners) admin SQL injection

* By : sn0oPy

* Risk : high

* Site : http://www.aspcode.net/products/admentor

* Dork : inurl:"admentor/admin"

* exploit :

UserID = 'or' '='

Password = 'or' '='

* contact : sn0oPy.team (at) gmail (dot) com [email concealed]

* greetz

[ more ]  [ reply ]

Hi all,

I'd like to announce the availability of 'stompy', a free tool to perform
a fairly detailed black-box assessment of WWW session identifier
generation algorithms. Session IDs are commonly used to track
authenticated users, and as such, whenever they're predictable or simply
vulnerable to bru

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-398-4 January 27, 2007
firefox regression
https://launchpad.net/bugs/77859
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.

[ more ]  [ reply ]

CVE-2006-5872 (filed against SQL-Ledger) also affects LedgerSMB. This
was first fixed in LedgerSMB 1.1.5 but due to a number of unrelated
bugs, we recommend upgrading to 1.1.7. SQL-Ledger fixed the problem in
2.6.21.

This occurs due to the improper handling of input handling in the
redirect f

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2007:029
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2007:028
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

Matteo Beccati wrote:
> --------
> - If you are running v0.3.x, upgrade to v0.3.30-alpha-pr2

This should have been "upgrade to v0.3.31-alpha-pr2"

Best regards
--
Matteo Beccati
http://www.openads.org
http://phpadsnew.com
http://phppgads.com

[ more ]  [ reply ]

Synopsis: WS_FTP 2007 Professional SCP handling format string vulnerability
Product: WS_FTP 2007 Professional
Vendor: Ipswitch



I. Background



"[..]Transfer files anywhere, anytime, with complete security.

* Lightning fast transfer speeds
* Industry leading security
* Time sa

[ more ]  [ reply ]

A few days ago I sent a mail to the Dexia bank (www.dexia.lu) about
their
website.

They have two logins, one is for the online banking account and one
is for some
kind of members' area. The problem with the "members' login" was that
a) it was
not SSL encrypted and b) it used to send bad usern

[ more ]  [ reply ]

rPath Security Advisory: 2007-0020-1
Published: 2007-01-25
Products: rPath Linux 1
Rating: Severe
Exposure Level Classification:
Local Root Deterministic Privilege Escalation
Updated Versions:
rmake=/conary.rpath.com@rpl:devel//1/1.0.3-2-0.1

References:
https://issues.rpath.com/browse/R

[ more ]  [ reply ]

rPath Security Advisory: 2007-0021-1
Published: 2007-01-25
Products: rPath Linux 1
Rating: Severe
Exposure Level Classification:
Remote Deterministic Denial of Service
Updated Versions:
bind=/conary.rpath.com@rpl:devel//1/9.3.4-0.1-1
bind-utils=/conary.rpath.com@rpl:devel//1/9.3.4-0.1-1

[ more ]  [ reply ]

haha, and I believe kev already had something to say on the topic
when a n00b had previously posted that as a vuln in Mac OS X:

"Explain to me how this is a MacOS specific bug? I can duplicate this
behavior on my debian linux machine."

http://www.securityfocus.com/archive/1/395142/30/0/threaded

[ more ]  [ reply ]

Marvin Simkin wrote:
> I respectfully disagree with this proposal and maybe we should discuss it.
>
> Being a member of the admin group is NOT 100% equal to being root.

Well, almost. Given that admins have write access to /Applications/,
they can install trojans there, which will be run by all use

[ more ]  [ reply ]

Hello,

About sudo in particular.

* You can force for a prompt (5mn by default on Mac OSX,) adding a line
such as the following in /etc/sudoers (using the visudo command):
Defaults timestamp_timeout = 0

* By default users do not authenticate on a per-tty basis. You can
enforce it with the

[ more ]  [ reply ]

Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability

iDefense Security Advisory 01.26.07
http://labs.idefense.com/intelligence/vulnerabilities/
Jan 26, 2007

I. BACKGROUND

CHMlib is an open source library used to read Microsoft CHM, compressed
HTML, files. CHM files were origin

[ more ]  [ reply ]

###############################################################
ID: S21SEC-034-en
Title: Cisco VTP Denial Of Service
Date: 26/01/2007
Status: Vendor contacted, bug fixed
Severity: Medium - DoS - remote from the local subnet
Scope: Cisco Catalyst Switch denial of service
Platforms: IOS
Author: Alfred

[ more ]  [ reply ]

************************************************************************
*******
# Title : FdScript <= v1.3.2 Remote File Disclosure Vulnerability
# Author : ajann
# Contact : :(
# Site : http://stud.usv.ro/~vlad_l/
# $$ : Free

********************************************************

[ more ]  [ reply ]

PHP Membership Manager Cross-Site Scripting Vulnerability

PHP Membership Manager is a browser based tool which allows a site owner to easily manage an unlimited number of username / password accounts and groups which access secure, protected areas of a web site which require logging in before acc

[ more ]  [ reply ]

DESCRIPTION:
I?ve found a cross-site scripting vulnerability in Yahoo! Messenger, a popular advertisement-supported instant messaging client and protocol provided by Yahoo! Attacker can inject a malicious script with local privilege to Y!M notification message.

The vulnerability is discovered in t

[ more ]  [ reply ]

If you follow these steps:

> #-Go to
> http://target/smf/index.php?action=pm;sa=send
> #-Inster your xss code for the recipient or BCC
> #-Press send.

The code will be injected in the page that is returned
to the attacker. No Personal Message containing
malicious code will be send to anybody, beca

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2007:027
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200701-23
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

========================================================================

Openads security advisory OPENADS-SA-2007-002
------------------------------------------------------------------------

Advisory ID: OPENADS-SA-2007-002
Date: 2007-Jan-25
Sec

[ more ]  [ reply ]

[Description]
MT (Movable Type) is a Blog software.
MT has a XSS filter to remove scripts from user inputs,
but there are ways to evade the filter using malformed input.

[Affected]
Movable Type <= 3.33

[Exploit]
By the default, Blog readers are allowed to post comments
containing html tags.

Attac

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200701-24
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

Any way, this vulnerability is not dangerous.. because for sending a successful PM request, you need to match the "sid" variable, that is impossible to get unless you already have control of the session.

The correct patch must be added in the theme file "PersonalMessage.template.php" at the beginin

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-410-2 January 25, 2007
tetex-bin vulnerability
CVE-2007-0104
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.10

This advis

[ more ]  [ reply ]

Peter Winter-Smith of NGSSoftware has discovered a medium risk vulnerability
in PGP Desktop which can allow a remote authenticated attacker to execute
arbitrary code on a system on which PGP Desktop is installed.

The vulnerability resides within the Windows Service which PGP Desktop
installs (which

[ more ]  [ reply ]

This vuln does not work. In readme file says change your forum database folder to somewhere else and edit one of the files ../db/ZixForum.mdb .
so this doesn't work .

[ more ]  [ reply ]