Hi, we are a group of Stanford researchers and we have recently
developed an automated tool for detecting injection vulnerabilities in
PHP. We ran our tool on the following list of software and found 99
potential security vulnerabilites (inspected bug reports attached
below):

e107 -- v0.7
myB

[ more ]  [ reply ]

Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability

iDefense Security Advisory 12.14.05
www.idefense.com/application/poi/display?id=356&type=vulnerabilities
December 14, 2005

I. BACKGROUND

Trend Micro Inc.'s ServerProtect provides antivirus scanning with
centralized management of virus

[ more ]  [ reply ]

Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability

iDefense Security Advisory 12.14.05
www.idefense.com/application/poi/display?id=354&type=vulnerabilities
December 14, 2005

I. BACKGROUND

Trend Micro Inc.'s ServerProtect provides antivirus scanning with
centralized management of v

[ more ]  [ reply ]

Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure

iDefense Security Advisory 12.14.05
www.idefense.com/application/poi/display?id=352&type=vulnerabilities
December 14, 2005

I. BACKGROUND

Trend Micro Inc.'s ServerProtect provides antivirus scanning with
centralized management

[ more ]  [ reply ]

Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow

iDefense Security Advisory 12.14.05
www.idefense.com/application/poi/display?id=353&type=vulnerabilities
December 14, 2005

I. BACKGROUND

Trend Micro Inc.'s ServerProtect provides antivirus scanning with
centralized management of virus o

[ more ]  [ reply ]

Retina can do remote registry, and file version checks with the proper
credentials. So more than likely, its doing a registry check for the
hotfix.

Tom Ferris
Researcher
www.security-protocols.com
Key fingerprint = 0DFA 6275 BA05 0380 DD91 34AD C909 A338 D1AF 5D78

On Tue, 13 Dec 2005, Dave Kor

[ more ]  [ reply ]

LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / blind SQL injection /
cross site scripting / local file inclusion / path disclosure / remote code/commands execution

software:
site: http://www.limbo-cms.com/
description:
"Putting it in short Limbo is a Content Management System, which allows you t

[ more ]  [ reply ]

To be clear we did not make any claim except that Retina has been
updated to be able to identify this vulnerability. Obviously being that
it is a local vulnerability we audit for the vulnerability using
credentials through normal means that you should find in most any
vulnerability assessment scanne

[ more ]  [ reply ]

======================================================================

Secunia Research 13/12/2005

- Internet Explorer Suppressed "Download Dialog" Vulnerability -

======================================================================
Table of Contents

Affected Software....

[ more ]  [ reply ]

ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug

----------------------------------------------------
site:http://www.linux.it/~fedro/
demo:http://www.e-stamp.ru/forum203/

--------------------------------------------------

http://target.com/pacth/users/use

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2005:226
http://www.mandriva.com/security/
_____________________________________________________________________

[ more ]  [ reply ]

PhpCOIN 1.2.2 arbitrary remote\local inclusion / blind sql injection / path disclosure

software:
site: http://www.phpcoin.com/
description: "a free software package originally designed for web-hosting resellers
to handle clients, orders, invoices, notes and helpdesk, but no longer limited to
hostin

[ more ]  [ reply ]

Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability

Release Date:
December 13, 2005

Date Reported:
May 23, 2005

External Refferences:
eEye ID# EEYEB-20050523
OSVDB ID# 18823
CVE # CAN-2005-2827
Microsoft # MS05-055

Severity:
Medium (Local Privilege Escalation to Kernel)

Syste

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 920-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
December 13th, 2005

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-229-1 December 13, 2005
zope2.8 vulnerability
CVE-2005-3323
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.10 (Breezy Badger)

The

[ more ]  [ reply ]

>substr(strtolower($_REQUEST['start']), 0, 1)
>
>So, the string is set to lower case, and then only the FIRST letter is
>used within the query. How can anyone exploit the database with a one
>character insertion? Of course this is within single quotes as well,
>so it cannot even be a command.

Thi

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-222-2 December 12, 2005
perl vulnerability
CVE-2005-3962
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)
Ubuntu 5

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

OpenPKG Security Advisory The OpenPKG Project
http://www.openpkg.org/security.html http://www.openpkg.org
openpkg-security (at) openpkg (dot) org [email concealed]

[ more ]  [ reply ]

On December 8, 2005, Vinnie Liu and The Metasploit Project released
an issue with PGP Desktop's free space wipe feature. Their web page
on the issue can be found at
<http://metasploit.com/research/vulns/pgp_slackspace/>. This report
has been replicated in other fora, including Bugtraq and Secu

[ more ]  [ reply ]

Hi, we are a group of Stanford researchers and we have recently
developed an automated tool for detecting injection vulnerabilities in
PHP. We ran our tool on the following list of software and found 99
potential security vulnerabilites (inspected bug reports attached
below):

e107 -- v0.7
myBlo

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-228-1 December 12, 2005
curl vulnerability
CVE-2005-4077
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)
Ubuntu 5

[ more ]  [ reply ]

There has been a new release which resolves this issue (2.6.1).

[ more ]  [ reply ]

Hi .. This is small bug for Arab Portal System v2 Beta 2

File name :- global.php
Remote:- Yes
Credit :-

Devil-00

Messenger :- <devil-00 (at) s4a (dot) cc [email concealed]>
E-Mail :- <stranger-killer (at) hotmail (dot) com [email concealed]>

//--# Devil SQL Injection
/*
This SQL can do when :-
magic_quotes_gpc = Off
$session_id << Bad Var

Attacking

[ more ]  [ reply ]

SEC-CONSULT Security Advisory 20051212-0
========================================================================
==
title: Nortel SSL VPN Cross Site Scripting/Command
Execution
program: Nortel SSL VPN
vulnerable version: 4.2.1.6
homepa

[ more ]  [ reply ]

As per the Dec 5th Sunbelt newsletter (Vol. 10, #49 ? Dec 5, 2005 ? Issue #554) it appears Sunbelt software has acquired Kerio Personal Firewall and that they will further develop the software. Hopefully Sunbelt will resolve this issue in a subsequent release.

-- Jon Hannah

[ more ]  [ reply ]

SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability

iDefense Security Advisory 12.12.05

www.iDefense.com/application/poi/display?id=350&type=vulnerabilities
December 12, 2005

I. BACKGROUND

SCO Unixware is a Unix operating system that runs on many OEM platforms.

II. DESCRIPTION

[ more ]  [ reply ]