Secunia Security Advisory - A vulnerability has been reported in neon, which can be exploited by malicious people to cause a DoS (Denial of Service).
fe7aa90e874195a1177176f5e807c79898d21fc8c3d5c220cee026df1088f790Secunia Security Advisory - James Bercegay has reported some vulnerabilities in SunShop Shopping Cart, which can be exploited by malicious people to conduct SQL injection attacks.
98691b775c3f800bf684dc10a7cf545b9214a5ae81669dd4a20e6f6e06b8b432Secunia Security Advisory - Federico Muttis has reported a vulnerability in vBulletin, which can be exploited by malicious users to conduct script insertion attacks.
2e496f121ba6ec17935cc194320a140cbb7e08acaa9e776618af5faefbeaa54cSecunia Security Advisory - Core Security Technologies has reported a vulnerability in the Anzio Web Print Object (WePO) ActiveX component, which can be exploited by malicious people to compromise a user's system.
c7732704982fa22aec47de26f616ad9a36340cd15305e5e19e81d7cce71e4086Secunia Security Advisory - Glafkos Charalambous and George Nicolaou have discovered a security issue in Folder Lock, which can be exploited by malicious, local users to disclose sensitive information.
1efaa4ddbe30550c67f752b28039ab24f10c63ed574673002722993a45445c9eMandriva Linux Security Advisory - Guido Landi found a stack-based buffer overflow in xine-lib that could allow a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via a long NSF title. The updated packages have been patched to correct this issue.
d083e2d6be526c76dac5c38045e56e16a97284f52f7ac3ebdcdea3559328cff6Mandriva Linux Security Advisory - A stack-based buffer overflow was found in mtr prior to version 0.73 that allowed remote attackers to execute arbitrary code via a crafted DNS PTR record, when called with the --split option. The updated packages provide mtr 0.73 which corrects this issue.
da54910e94b149a4e4c7c1aa6a98b994bb8ac622cfe5e54f33cf1fa58d9c5d49Mandriva Linux Security Advisory - A format string vulnerability was discovered in yelp after version 2.19.90 and before 2.24 that could allow remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command-line or via URI helpers in Firefox, Evolution, or possibly other programs. The updated packages have been patched to correct this issue.
da00a94fca68b754636dddb3e0930226c093a98991b1378ec5407e4db5f349d2Survey Wizard suffers from a remote SQL injection vulnerability.
5cc1bc78563c04ebba8a2cc882bfa49b6634d1eb2df6c3f9b2c4f5baabd288eeDXShopCart version 4.30mc suffers from a remote SQL injection vulnerability.
27402ea99ba307371f220b241b8c397ea9dddbe9115ace8fd0c2b707e5e758a9FAQ Management suffers from a remote SQL injection vulnerability.
64b84e4eeabbc6a861b35ada5709667df8059d22638450a550644ffa2318fd90Core Security Technologies Advisory - vBulletin versions 3.7.2 Patch Level 1 and 3.6.10 Patch Level 3 suffer from a cross site scripting vulnerability.
33e0a80ee6c61a4d22a3cf12e25ffae5a8a5d7ba8e5f4ef6d5683d7078fb5bc7Core Security Technologies Advisory - Anzio Web Print Object (WePO) is a Windows ActiveX web page component that suffers from a buffer overflow vulnerability.
a318beb516a48eb0fd3989f69c6622849d755284631c5cf5b2afe2b098a5098bSimasy CMS suffers from a remote SQL injection vulnerability.
060cd0ef075ddec30985724896fea10141e5ab2b16331288ec5719ff92687d01GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP specific capabilities such as presence and messaging. It supports secure telephone extensions for making calls over the Internet, and intercept/decrypt-free peer-to-peer audio and video extensions. It is not a SIP proxy, a multi-protocol telephone server, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate.
ebec261bacfc89e7ac9b0ee3bf3d190c17aa2fdcc425ed66beec63df80fd6a63WebEdition CMS remote blind SQL injection exploit.
f4e336b97d81ee997f08ba1d74076efb12d42a8d60cea9563e073bb56ac4931cphpBazar version 2.0.2 suffers from a remote SQL injection vulnerability.
9a7b0e0c7d45b000de0e2d22d9caf45711aebcf8c85828c75f7ebc226747f05bDirBuster is a multi-threaded java application designed to brute force directories and files names on web/application servers.
bed7dedb2a1f6762036bf3a7543538797dc21156d30b68448d8203d6f1641c9dToorCon X Call For Papers - Papers and presentations are being accepted for ToorCon X to be held at the Convention Center in San Diego, CA from September 24th through the 25th.
a90d073621595c05234291bf04af191999656f8af8833645777ba85e9a5b9cb7Folder Lock versions 5.9.5 and below suffer from a local password information disclosure vulnerability.
e70614ceef99107c982c36719a92fb87f9c6aa2a242c4d1168734e7b9096fafePars4U Videosharing version 1 cross site scripting and remote blind SQL injection exploit.
6734b4da1c16716a356f82ab324208b648d5194e9a80844c06f293873a754ea1Secunia Security Advisory - Ubuntu has issued an update for postfix. This fixes a security issue, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
201c7ae232ab05f3fd0363c4b6a851549c6d066df5c69dfa19330a023701412bSecunia Security Advisory - Some vulnerabilities have been reported in llcon, which can be exploited by malicious people to cause a DoS (Denial of Service).
7e14e367442bd4bd8bc79114546b23a1a285e8f68f756e70808ce84ed9bde230Secunia Security Advisory - Avaya has acknowledged a vulnerability in Avaya CMS, which can be exploited by malicious, local users to cause a DoS (Denial of Service).
667b118e267f0cd60597bfdc7d2172b6aa93a58c4d606e572610cbb9b665f592Secunia Security Advisory - Hussin X has reported a vulnerability in Forced Matrix Script, which can be exploited by malicious people to conduct SQL injection attacks.
d6013dc25298a93be1435529630d9b89946e811adde2f51e37aa1320c23d0b25
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed