.:[ packet storm ]:.
                           
honesty is the best policy
honesty is the best policy

 Section:  .. / 0604-advisories  /

Page 1 of 30
<< 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 >> Files 1 - 25 of 725
Currently sorted by: Last ModifiedSort By: File Name, File Size

 ///  File Name: W-AgoraXSS.txt
Description:
W-Agora version 4.20 is susceptible to cross site scripting attacks.
Author:r0xes.ratm
File Size:1361
Last Modified:Apr 30 00:18:27 2006
MD5 Checksum:537ec81ac86fd2a483ed0ffe12bc2cd0

 ///  File Name: textfilebbXSS.txt
Description:
TextFileBB is susceptible to three cross site scripting vulnerabilities.
Author:r0xes.ratm
File Size:2099
Last Modified:Apr 30 00:16:55 2006
MD5 Checksum:dc38b40236d1084fcd97edac17ed6b3b

 ///  File Name: LandDownUnder.txt
Description:
Land Down Under 802 and below suffer from a path disclosure vulnerability.
Homepage:http://Aria-Security.net
File Size:1458
Last Modified:Apr 28 21:46:41 2006
MD5 Checksum:cf438c534aa71ec36ac81b7aaa160cea

 ///  File Name: yahoo-xss-2.txt
Description:
Description of a Yahoo! Mail XSS vulnerability that has been patched silently by Yahoo.
Author:Cesar
File Size:2304
Last Modified:Apr 28 21:29:20 2006
MD5 Checksum:3ef71a9ee64288891dd09692c33d1a05

 ///  File Name: Secunia-Salamander.txt
Description:
Secunia Research 28/04/2006 - Servant Salamander unacev2.dll Buffer Overflow Vulnerability - Secunia Research has discovered a vulnerability in Servant Salamander, which can be exploited by malicious people to compromise a user's system.
Homepage:http://secunia.com/advisories/
File Size:3428
Last Modified:Apr 28 21:26:45 2006
MD5 Checksum:6756d93d5103a222cef27135b7cfd662

 ///  File Name: ECHO_ADV_31_2006.txt
Description:
[ECHO_ADV_31$2006] Sws Web Server 0.1.7 Strcpy() & Syslog() Format String Vulnerability. A format string vulnerability in Sws Web Server allows remote attackers to cause the program to execute arbitrary. The format string vulnerability and buffer overflow can be found in sws_web_server.c ayardosyasi.h file.
Author:ECHO_ADV
Homepage:http://advisories.echo.or.id/
File Size:2937
Last Modified:Apr 28 21:25:40 2006
MD5 Checksum:95a30061d7337115db1d1840d78a8877

 ///  File Name: Neomail_pl.txt
Description:
Neomail suffers from XSS in Neomail.pl.
Author:Aria-Security
Homepage:http://www.aria-security.net
File Size:550
Last Modified:Apr 28 21:24:25 2006
MD5 Checksum:5f9db4e6cb3d969328a835193af94fc3

 ///  File Name: Cireos.txt
Description:
Cireos Portal from SirceOS suffers from XSS in buscar.php.
Homepage:http://www.aria-security.net
File Size:704
Last Modified:Apr 28 21:23:00 2006
MD5 Checksum:aaa2e8f30230a77ae0ca80e20399f370

 ///  File Name: AD20060428.txt
Description:
There is a vulnerability exists in WinISO and UltraISO, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability has been confirmed in version WinISO 5.3,UltraISO V8.0.0.1392, PowerISO v2.9,Magic ISO 5.0 Build 0166
Homepage:http://secway.org
Related File:PoC.iso.bin
File Size:3289
Last Modified:Apr 28 21:21:34 2006
MD5 Checksum:f774737162f3f7718e685159e8d2addd

 ///  File Name: IE-UserInterface.txt
Description:
Microsoft Internet Explorer suffers from a potential user interaction race in its handling of security dialogs. As a result, it may be possible for a malicious web site to install software on a visiting system or take other actions that may compromise the privacy or the security of the visitor.
Author:Matthew Murphy
Homepage:http://student.missouristate.edu/m/matthew007/advisories.asp?adv=2006-02
File Size:13323
Last Modified:Apr 28 21:19:53 2006
MD5 Checksum:6eaac5db57a5b06689dc6f14bcce938e

 ///  File Name: EEYEB-20060227.txt
Description:
eEye Digital Security has discovered a critical vulnerability in Juniper Networks SSL-VPN Client ActiveX Control. JuniperSetup.ocx ActiveX control is automatically loaded through the web interface of Juniper Networks SSL-VPN. There is an exploitable buffer overflow in the handling a parameter of ActiveX control that will allow a remote attacker to reliably overwrite the stack with arbitrary data and execute arbitrary code though the web browser.
Homepage:http://www.eeye.com/
File Size:3952
Last Modified:Apr 28 21:18:37 2006
MD5 Checksum:acbdd272cf9a87bfaa3c00f312ca0440

 ///  File Name: OpenBulletinBoard.txt
Description:
Open Bulletin Board suffers from multiple XSS and SQL injection vulnerabilities.
Author:qex
File Size:223
Last Modified:Apr 28 21:17:15 2006
MD5 Checksum:9d2b6aecb7e49650e8a770fc8564c014

 ///  File Name: cisco-sa-20060126-vpn.txt
Description:
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack. A malicious user may be able to send crafted packets to a concentrator which may cause the device to halt and/or drop user connections. The power must then be reset on the device to recover.
Homepage:http://www.cisco.com
File Size:14474
Last Modified:Apr 28 21:16:30 2006
MD5 Checksum:da29984048b1834dceeaa6299ad0ceaa

 ///  File Name: MySmartBB-1.1.x.txt
Description:
MySmartBB v1.1.x suffers from SQL injection and XSS.
Author:BoNy-m
File Size:453
Last Modified:Apr 28 21:15:48 2006
MD5 Checksum:ff425bd76f857fd8b3610536b665f564

 ///  File Name: DevBB-1.0.0.txt
Description:
DevBB versions less than or equal to 1.0.0 suffer from XSS.
Author:qex
File Size:124
Last Modified:Apr 28 21:14:23 2006
MD5 Checksum:99ee68e89602af03815e2ede19284aa3

 ///  File Name: Secunia-SpeedProject.txt
Description:
Secunia Research 26/04/2006 - SpeedProject Products ACE Archive Handling Buffer Overflow: Secunia Research has discovered a vulnerability in various SpeedProject products, which can be exploited by malicious people to compromise a user's system.
Homepage:http://secunia.com/secunia_security_advisories/
File Size:3861
Last Modified:Apr 28 21:13:29 2006
MD5 Checksum:71ab68726c4ce180e48b726ad86e0a15

 ///  File Name: EV0125.txt
Description:
eVuln ID: EV0125 - warforge.NEWS SQL Injection and Multiple XSS Vulnerabilities.
Author:Aliaksandr Hartsuyeu
Homepage:http://evuln.com/
File Size:1165
Last Modified:Apr 28 21:12:17 2006
MD5 Checksum:eb25b5b1645cb206f4c5d24728f2703f

 ///  File Name: SSRT061148-1.txt
Description:
HPSBMA02113 SSRT061148 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update April 2006: Oracle(R) has issued a Critical Patch Update which contains solutions for a number of potential security vulnerabilities. These vulnerabilities may be exploited locally or remotely to compromise the confidentiality, availability or integrity of Oracle for OpenView (OfO).
Homepage:http://www.hp.com
File Size:8061
Last Modified:Apr 28 21:05:46 2006
MD5 Checksum:8d18e73b7da99433a37969f6c0814671

 ///  File Name: SSRT051074-4.txt
Description:
HPSBUX02075 SSRT051074 rev.4 - HP-UX Running xterm Local Unauthorized Access: A potential security vulnerability has been identified with HP-UX running xterm. The vulnerability could be exploited by a local user to gain unauthorized access.
Homepage:http://www.hp.com
File Size:7264
Last Modified:Apr 28 21:04:39 2006
MD5 Checksum:ecbeda06feed5582c535d393f5be5281

 ///  File Name: SSRT061133-9.txt
Description:
HPSBUX02108 SSRT061133 rev.9 - HP-UX running Sendmail, Remote Execution of Arbitrary Code
Homepage:http://www.hp.com
File Size:10995
Last Modified:Apr 28 21:03:54 2006
MD5 Checksum:c2ea59897237b1015a5d3f5ea829a86d

 ///  File Name: ZDI-06-011.txt
Description:
ZDI-06-011: Mozilla Firefox Table Rebuilding Code Execution Vulnerability. This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Mozilla/Firefox web browser and Thunderbird e-mail client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious e-mail.
Homepage:http://www.zerodayinitiative.com/
File Size:2425
Last Modified:Apr 28 21:02:49 2006
MD5 Checksum:e7653be784ba9888857807b479e13c12

 ///  File Name: glsa-200604-18.txt
Description:
Gentoo Linux Security Advisory GLSA 200604-18 - Several vulnerabilities were found in Mozilla Suite. Version 1.7.13 was released to fix them. Versions less than 1.7.13 are affected.
Homepage:http://security.gentoo.org
File Size:5546
Last Modified:Apr 28 20:59:30 2006
MD5 Checksum:95005cf1fb52e3c3eb4d5ad375a5e2d0

 ///  File Name: USN-275-1.txt
Description:
Ubuntu Security Notice 275-1: multiple vulnerabilities in mozilla.
Homepage:http://security.ubuntu.com/
File Size:26268
Last Modified:Apr 28 20:59:19 2006
MD5 Checksum:ac004322e7c051a3f99c46605444723d

 ///  File Name: USN-274-1.txt
Description:
Ubuntu Security Notice 274-1: A logging bypass was discovered in the MySQL query parser. A local attacker could exploit this by inserting NUL characters into query strings (even into comments), which would cause the query to be logged incompletely.
Homepage:http://security.ubuntu.com/
File Size:9493
Last Modified:Apr 28 20:58:55 2006
MD5 Checksum:fc12df206692e97ce1d4ceca1655a86c

 ///  File Name: dsa-1046-1.txt
Description:
Debian Security Advisory 1046-1: several security related problems have been discovered in Mozilla.
Homepage:http://www.debian.org/security
File Size:36514
Last Modified:Apr 28 20:58:48 2006
MD5 Checksum:8978f0743574f1d452d153dab3ce61b2