SEC Consult Security Advisory < 20051211-0 >
========================================================================
==
title: < Several XSS issues in Horde Framework, Kronolith
Calendar, Mnemo Notes, Nag Tasks and Turba
Addressbook >

[ more ]  [ reply ]

Take a better look at your \'Memberlist.php\' source code.

// Select the members from the database.
$request = db_query(\"
SELECT mem.ID_MEMBER
FROM {$db_prefix}members AS mem
LEFT JOIN {$db_prefix}log_online AS lo ON (lo.ID_MEMBER = mem.ID_MEMBER)
LEFT JOIN {$db_prefix}membergroups AS m

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200512-04
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

The following is a very well researched text from Matthew Murphy's blog
discussing the matter of disclosing vulnerabilities to many vendors (and
specifically Microsoft). Further, as I understand it, he shows how
vendors today use terms such as "responsible disclosure" to scare
researchers and cl

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-227-1 December 12, 2005
xpdf/cupsys/tetex-bin/kdegraphics/koffice vulnerabilities
CVE-2005-3191, CVE-2005-3192, CVE-2005-3193
===========================================================

A security issue

[ more ]  [ reply ]

[quote]
I'm a developer from over at simplemachines and I do not see how this can pose an exploit? Let's examine the code piece by piece:

The code is entered at this point:
if (!is_numeric($_REQUEST['start']))

So, will be executed if $_REQUEST['start'] is a string. It's then used in the query. How

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

NetGear RP114 TCP SYN Flooding Denial of Service

scip AG Vulnerability (12/12/2005)

I. INTRODUCTION

NetGear is a popular manufacturer for network devices. Especially their
SOHO and appliance boxes are widely in private use. One of the user
products

[ more ]  [ reply ]

The poor security and input validation at Guestserver versions below 5 ( there are still lots of them out there ) allow all HTML tags inside a message and it can be exploited as much as you want to.

http://www.stud.ntnu.no/~larsell/guestserver/

A Google Search for "Guestbook by Guestserver - v4.

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200512-03
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

IMOEL CMS
has the weakness to download the plain text sql password in the setting.php file
*/*************************************
$setting['host']['username'] = 'sqlusername';
$setting['host']['password'] = 'sqlpassword';

***************************************
so u can download the setting.ph

[ more ]  [ reply ]

Description : A web controller script.

Site : http://www.btgrup.com

Username : 'or''='
Password : 'or''='

Thanx : My Friends b3g0k and KHC memberz

Freedom For Ocalan

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 919-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
December 12th, 2005

[ more ]  [ reply ]

calling all London based hackers, security professionals, feds, geeks,
nerds, groupies and scene whores...

on behalf of DC4420, i'm pleased to announce the inaugural meeting of
the London DC group, and invite you to come and drink, talk and set the
agenda for the year to come... the venue will b

[ more ]  [ reply ]

<?php
# ---flatnuke_256_xpl.php 4.32 10/12/2005
#
# Flatnuke 2.5.6 privilege escalation / remote commands execution exploit
# (works with magic_quotes_gpc off, try this with 2.5.5:
# http://www.milw0rm.com/id.php?id=1140)
#
# coded by rgod at http://rgod.altervis

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2005:206-1
http://www.mandriva.com/security/
_____________________________________________________________________

[ more ]  [ reply ]

I'm a developer from over at simplemachines and I do not see how this can pose an exploit? Let's examine the code piece by piece:

The code is entered at this point:
if (!is_numeric($_REQUEST['start']))

So, will be executed if $_REQUEST['start'] is a string. It's then used in the query. However, it

[ more ]  [ reply ]

APANI Networks EpiForce 1.9 and Earlier Potential Denial of Service in EpiForce Agent

NOTICE: The information in this notice should be acted upon as soon as possible. All affected customers have already been contacted by Apani.

Release Date: 2005-12-09

Potential Security Impact: Remote Denial

[ more ]  [ reply ]

I was poking around my own server because I had an installation of
torrential and found this vuln. The problem lies in getdox.php. It
works by taking an argument after a "/". This specifies a file. The
DOX folder that it grabs the files from is located int /dox such that
/ is the directory that the

[ more ]  [ reply ]

The Metasploit Project has released three new vulnerability sets and a
password dumping extension to the Meterpreter payload. Enjoy!

-HD

[ PGP Desktop Wipe Free Space Flaw ]

PGP Desktop includes a Wipe Free Space utility that claims to eliminate
data in all the free space on your hard drive inc

[ more ]  [ reply ]

Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability

iDefense Security Advisory 12.09.05
www.idefense.com/application/poi/display?id=349&type=vulnerabilities
December 9, 2005

I. BACKGROUND

Ethereal is a full featured open source network protocol analyzer.

For more information, see http

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2005:225
http://www.mandriva.com/security/
_____________________________________________________________________

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 918-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
December 9th, 2005

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2005:224
http://www.mandriva.com/security/
_____________________________________________________________________

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-226-1 December 09, 2005
courier vulnerability
CVE-2005-3532
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)
Ubunt

[ more ]  [ reply ]

###################################################################
Full PDF Advisory: http://securitynation.com/files/sndown.php?id=22 english
http://securitynation.com/files/sndown.php?id=22 spanish
###################################################################

Multiple

[ more ]  [ reply ]

For new list subscribers etc., was it the address 3Com_SRT [at] 3Com.com
listed at
http://csoweb4.3com.com/security/

or security [at] 3com.com
listed at independent dictionary
http://www.osvdb.org/vendor_dict.php?section=vendor&id=1210&c=%
etc.

If no, please try both of these!

Regards,
Juha-Matt

[ more ]  [ reply ]

KAPDA New advisory

Vendor: http://www.simplemachines.org/
Vulnerable Version:SMF 1.1 rc1, Other versions also
may be affected.
Bug: SQL Injection
Exploitation: Remote with browser

Description:
--------------------
Simple Machines Forum is a most widely used PHP-based
message board system that uses

[ more ]  [ reply ]