BugTraq Mode:
(Page 1296 of 1748)  < Prev  1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301  Next >
Kent's Guestbook database exploit 2005-07-29
l--s hotmail com
hello ,

site : http://kentldyer.com/guestbook/default.asp

bug is here :

http://[ Trage ] / guestbook / guestbook.mdb

============
my name :

MeSa7eB

My website :

http://3asfh.net/vb

My Email :

l--s (( at )) hotmail ((Dot)) com

by

[ more ]  [ reply ]
PC-EXPERIENCE/TOPPE CMS Security Advisory 2005-07-30
rat marocmaffia com


# PC-EXPERIENCE/TOPPE CMS Security Advisory
# By : Morinex
# E-Mail : rat (at) marocmaffia (dot) com [email concealed]
# Date : 30-07-2K5 ( so lazzy this summer )
# Shoutz : Woopie , sirh0t , 00pz , V1su4l and the gay´s of 0x1fe. I hate them so much isnt Falesco ? 0x1fe.com :)

Vulnerabilities

* User-ID Bypassing ( remote

[ more ]  [ reply ]
Kayako liveResponse Multiple Vulnerabilities 2005-07-30
GulfTech Security Research (security gulftech org)
##########################################################
# GulfTech Security Research July 30th, 2005
##########################################################
# Vendor : Kayako Web Solutions
# URL : http://www.kayako.com/
# Version : Kayako liveResponse v2.x
# Risk : Multiple

[ more ]  [ reply ]
Kshout Data Disclosure 2005-07-29
group (at) soulblack.com (dot) ar [email concealed] (group soulblack com ar)
===========================================================

============================================================
Title: Kshout Data Disclosure
Vulnerability Discovery: SoulBlack - Security Research -
http://soulblack.com.ar
Date: 26/07/2005
Severity: Medium. Remote users can view configurat

[ more ]  [ reply ]
RE: [VOIPSEC] VoIP-Phones: Weakness in proccessing SIP-Notify-Messages 2005-07-29
Walton, John Michael (John) (jmwalton avaya com)
All-

Avaya is unable to duplicate any application unhandled exceptions,
crashes, or reboots due to unsolicited SIP NOTIFY message processing in
the Avaya 4620 and IP Softphone endpoints. Furthermore, Avaya tested a
number of variations of the unsolicited SIP NOTIFY messages including
utilizing net

[ more ]  [ reply ]
[SECURITY] [DSA 770-1] New gopher packages fix insecure temporary file creation 2005-07-29
joey infodrom org (Martin Schulze)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 770-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
July 29th, 2005

[ more ]  [ reply ]
[USN-156-1] TIFF vulnerability 2005-07-29
Martin Pitt (martin pitt canonical com)
===========================================================
Ubuntu Security Notice USN-156-1 July 29, 2005
tiff vulnerability
https://bugzilla.ubuntu.com/show_bug.cgi?id=12008
===========================================================

A security issue affects the following Ubuntu releases:

[ more ]  [ reply ]
Re[2]: [Full-disclosure] SPIDynamics WebInspect Cross-ApplicationScripting (XAS) 2005-07-29
3APA3A (3APA3A SECURITY NNOV RU)
Dear DAN MORRILL,

--Wednesday, July 27, 2005, 10:08:12 PM, you wrote to 3APA3A (at) SECURITY.NNOV (dot) RU [email concealed]:

DM> I got the official notice from SPI Dynamics to day on this issue. I am in no
DM> way slamming people at all, but the interesting response was inability to
DM> reproduce the XAS issue.

SPI Dynamic

[ more ]  [ reply ]
Cisco Security Advisory: IPv6 Crafted Packet Vulnerability 2005-07-29
Cisco Systems Product Security Incident Response Team (psirt cisco com)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Cisco Security Advisory: IPv6 Crafted Packet Vulnerability

Revision 1.0

For Public Release 2005 July 29 0800 UTC

- ------------------------------------------------------------------------
-------

Contents
========

Summary
Affected Products

[ more ]  [ reply ]
[SECURITY] [DSA 769-1] New gaim packages fix denial of service 2005-07-29
joey infodrom org (Martin Schulze)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 769-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
July 29th, 2005

[ more ]  [ reply ]
MDKSA-2005:127 - Updated mozilla-thunderbird packages fix multiple vulnerabilities 2005-07-29
Mandriva Security Team (security mandriva com)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Update Advisory
_______________________________________________________________________

Package name: mozilla-thunderbird
Adv

[ more ]  [ reply ]
MDKSA-2005:126 - Updated fetchmail packages fix vulnerability 2005-07-29
Mandriva Security Team (security mandriva com)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Update Advisory
_______________________________________________________________________

Package name: fetchmail
Advisory ID:

[ more ]  [ reply ]
SPIDynamics WebInspect Cross-ApplicationScripting (XAS) 2005-07-28
Security-Alert (security-alert spidynamics com)
SPI Dynamics Security Bulletin SPI-0001-07282005

Issue:
Potential WebInspect Cross Application Scripting (XAS) Vulnerability

Severity:
Low

Potential Impact:
Remote Code Execution

Recommendation:
All customers should run SmartUpdate to ensure they are running the
latest version of WebInspect (5.5

[ more ]  [ reply ]
[FLSA-2005:163559] Updated php packages fix security issues 2005-07-29
Marc Deslauriers (marcdeslauriers videotron ca)
---------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated php packages fix security issues
Advisory ID: FLSA:163559
Issue date: 2005-07-28
Product: Fedora Core
Keywords: Bugfix
CVE Na

[ more ]  [ reply ]
Advisory 12/2005: UseBB Multiple Vulnerabilities 2005-07-28
Stefan Esser (sesser hardened-php net)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hardened PHP Project
www.hardened-php.net

-= Security Advisory =-

Advisory: UseBB Multiple Vulnerabilities
Release Date: 2005/07/28
Last Modified: 2005/07/28
Author:

[ more ]  [ reply ]
Website Baker Project Multiple Vulnerabilities 2005-07-28
thegreatone2176 yahoo com
----------------------------------------------------------
Website Baker Project Multiple Vulnerabilities
----------------------------------------------------------

Vulnerabilities
---------------

1) admin/media/browse.php

The "dir" parameter is vulnerable to xss. Also the script blocks ../ but i

[ more ]  [ reply ]
Re: eBay phishing - phishers are getting better 2005-07-24
info securityfocus com, "[at]" securityfocus com,orebla it securityfocus com
an other email:

<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>Fraud Investigations Team ( F I T )</title>
</head>

<body>

<p>
<img
src="http://pics.ebaystatic.com/aw/pics/navbar/redesign_p1/ebayLogo.gif"

border="0" width="150" height="70"><b><font style="line-he

[ more ]  [ reply ]
Re: Re : [Firefox Bug 302187] New: Shared section vulnerability when opening microsoft office document resulting in DoS 2005-07-28
sylvain roger solucom fr
As I got some questions about this I think I need to precise it.
I can say for sure now : It is not a firefox vulnerability but Microsoft Office vulnerability. Firefox is just here as an example.
The vulnerability is that when a winword.exe process is created from another application (like firefox.e

[ more ]  [ reply ]
[OpenPKG-SA-2005.015] OpenPKG Security Advisory (spamassassin) 2005-07-28
OpenPKG (openpkg openpkg org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

OpenPKG Security Advisory The OpenPKG Project
http://www.openpkg.org/security.html http://www.openpkg.org
openpkg-security (at) openpkg (dot) org [email concealed]

[ more ]  [ reply ]
Thomson Web Skill Vantage Manager 2005-07-28
walter sobchak hushmail com
Hi

Is anyone here using Thomson Web Skill Vantage Manager for online training? If yes I suggest to take the system offline and to improve input validation.The system allows an SQL injection at the login - this gives a visitor easy access with complete Administrator privileges over the system. A mal

[ more ]  [ reply ]
[USN-155-2] Updated Epiphany packages to match Mozilla security update 2005-07-28
Martin Pitt (martin pitt canonical com)
===========================================================
Ubuntu Security Notice USN-155-2 July 28, 2005
epiphany-browser regressions
https://bugzilla.ubuntu.com/show_bug.cgi?id=13041
===========================================================

A security issue affects the following Ubuntu r

[ more ]  [ reply ]
Vulnerability in Linksys Router access 2005-07-28
Nick Simicich (njs scifi squawk com)
Many months ago, I reported a vulnerability to Linksys/Cisco regarding
the WRT54G. The vulnerability is simple: SSL is used to secure
communications with the router.

That is a good thing. However, SSL is not secure when you just
implement part of it. SSL was implemented in a miserably insecure

[ more ]  [ reply ]
Re: PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities 2005-07-26
stuartc1 securityfocus com, hotmail securityfocus com (at),com securityfocus com (dot)
Hi,

This is a bugus bug report, I've tested this on both v0.8 and v0.9 and no problems.

Please remove this bug as it gives a bad name to the project.

It is possible to pass fake variables (as with most systems), but not executable code!! which is not a security issue.

If I'm missing something, p

[ more ]  [ reply ]
(Page 1296 of 1748)  < Prev  1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301  Next >


 

Privacy Statement
Copyright 2010, SecurityFocus