Network Security Archives

Securiteam Exploits/Hacking Tools Newsletter (date)

[Thread Index] [Top] [All Lists]

December 29, 2004

[UNIX] NetBSD Binary Compatibility Code Insufficient Argument Validation, SecuriTeam, 12:53
[NEWS] Browsers' FTP Client can be Used to Send Mail, SecuriTeam, 12:22
[UNIX] Multiple Vulnerabilities in Moodle (view.php, file.php), SecuriTeam, 11:52
[UNIX] Stack Overflow in AIFF Demultiplexer, SecuriTeam, 11:42
[NT] Microsoft Internet Explorer XP SP2 Fully Automated Remote Compromise, SecuriTeam, 11:22
[UNIX] kpdf Buffer Overflow Vulnerability, SecuriTeam, 10:52
[UNIX] Multiple WHM AutoPilot Vulnerabilities, SecuriTeam, 10:42
[UNIX] Advanced Guestbook XSS, SecuriTeam, 10:22
[NT] Netcat for Windows '-e' Buffer Overflow, SecuriTeam, 05:20

December 28, 2004

[UNIX] WebLibs File Disclosure, SecuriTeam, 13:43
[UNIX] phpBB Attachment Mod Directory Traversal HTTP POST Injection, SecuriTeam, 13:33
[UNIX] SugarSales Multiple Vulnerabilities, SecuriTeam, 13:23
[UNIX] Multiple Extensions Vulnerability in phpBB Attachment Mod, SecuriTeam, 13:13
[UNIX] JSBoard Multiple Extensions Vulnerability, SecuriTeam, 12:52
[UNIX] UseModWiki XSS, SecuriTeam, 12:42
[EXPL] PHP openlog() Buffer Overflow, SecuriTeam, 12:32
[UNIX] Multiple Extensions Vulnerability in MediaWiki, SecuriTeam, 12:22
[UNIX] 2Bgal SQL Injection Vulnerability, SecuriTeam, 12:12
[NEWS] Lycos Free Email Cross-Site Scripting Vulnerability, SecuriTeam, 08:41

December 27, 2004

[UNIX] Multiple XSS Vulnerabilities in WordPress, SecuriTeam, 15:24
[NEWS] Scripting Vulnerabilities in Indian Email Providers, SecuriTeam, 15:14
[NT] Microsoft Windows Kernel ANI File Parsing Crash and DOS Vulnerability, SecuriTeam, 15:14
[UNIX] SHOUTcast Remote Format String Vulnerability, SecuriTeam, 15:04
[UNIX] Cross Site Scripting in PsychoStats, SecuriTeam, 12:23
[UNIX] Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation, SecuriTeam, 12:02
[NT] Microsoft Windows LoadImage API Integer Buffer Overflow, SecuriTeam, 11:52
[EXPL] PHP Scripts Automated Arbitrary File Inclusion (Worm), SecuriTeam, 08:51
[NEWS] Multiple Vulnerabilities in Oracle Database (Trigger, Extproc, Wrapped Procedures, PL/SQL Injection), SecuriTeam, 08:40
[UNIX] ZeroBoard PHP Code Injection and XSS, SecuriTeam, 08:20
[EXPL] Missing DAC controls in sys_chown() on Linux., SecuriTeam, 08:20
[NT] Microsoft Windows winhlp32.exe Heap Overflow Vulnerability, SecuriTeam, 08:10
[EXPL] Crystal FTP Pro Client LIST Proof of Concept, SecuriTeam, 08:00
[NEWS] IBM DB2 Buffer Overflow Vulnerabilities (rec2xml, generate_distfile), SecuriTeam, 08:00
[NEWS] Multiple Vulnerabilities in Oracle Database (Character Conversion, Extproc, Password Disclosure, ISQLPlus,TNS Listener), SecuriTeam, 07:50
[EXPL] Snort Malformed TCP Options DoS, SecuriTeam, 07:40
[UNIX] PHProxy Cross Site Scripting, SecuriTeam, 07:40
[NEWS] Cross Site Scripting in Yacy, SecuriTeam, 07:09
[NT] Remote Script Execution in Tlen.pl, SecuriTeam, 06:59
[EXPL] FirstClass HTTP Large Request Handling DoS, SecuriTeam, 06:49
[EXPL] Mercury/32 Exploit Code (14 Targets), SecuriTeam, 06:39
[EXPL] MySQL UDF Dynamic Library Exploit, SecuriTeam, 06:39
[EXPL] Local Privilege Escalation in Solaris Passwd, SecuriTeam, 06:28
[EXPL] Buffer overflow in Solaris CDE libDtHelp (Executable and Non-Executable Stack), SecuriTeam, 06:18
[EXPL] Stack-Based Buffer Overflow in Solaris Runtime Linker, SecuriTeam, 06:08

December 22, 2004

[UNIX] FTP Client Command Injection, SecuriTeam, 11:21
[UNIX] Cleartext SMB Passwords in Novell Desktop Linux using KDE, SecuriTeam, 10:51
[UNIX] Multiple Vulnerabilities in phpMyAdmin (External Transformations), SecuriTeam, 10:20
[UNIX] ChangePassword Unsafe Command Execution (make), SecuriTeam, 10:10
[NT] Winmail Server Information Disclosure, SecuriTeam, 10:10
[UNIX] vBulletin Unofficial lastten SQL Injection (ftitle), SecuriTeam, 09:50
[UNIX] phpMyChat Improper File Permissions, SecuriTeam, 09:50
[UNIX] Opera Remote Command Execution with Kfmclient, SecuriTeam, 07:59
[UNIX] Hewlett Packard HP-UX ftpd Remote Buffer Overflow, SecuriTeam, 06:59
[EXPL] phpBB highlight Arbitrary File Upload (Santy.A), SecuriTeam, 06:49

December 21, 2004

[UNIX] Multiple phpGroupWare Vulnerabilities (Path Disclosure, XSS, SQL Injection), SecuriTeam, 15:42
[NT] Unreachable Socket in Lithtech Engine (New Protocol), SecuriTeam, 15:31
[UNIX] Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability, SecuriTeam, 15:11
[NT] PHP Input Validation Vulnerabilities (addslashes, Windows Only), SecuriTeam, 15:01
[EXPL] AIX paginit, lsmcode and invscout Local Exploits, SecuriTeam, 14:41
[EXPL] Ultrix dxterm -setup Buffer Overflow, SecuriTeam, 14:31
[UNIX] Crypt::ECB Block Zero Truncation, SecuriTeam, 14:21
[NT] Spy Sweeper Enterprise Client Privilege Escalation Vulnerability, SecuriTeam, 14:11
[NT] My Firewall Plus Privilege Escalation Vulnerability, SecuriTeam, 13:50
[UNIX] IBM AIX chcod Local Privilege Escalation Vulnerability, SecuriTeam, 08:48
[UNIX] libkadm5srv Heap Buffer Overflow, SecuriTeam, 08:38

December 20, 2004

[NT] Microsoft PowerPoint "Action Settings" Allows Invocation of Default Browser, SecuriTeam, 16:01
[UNIX] PHP Shmop Write of Arbitrary Memory (Exploit), SecuriTeam, 15:41
[NEWS] Hotmail Cross-Site Scripting Vulnerability (IE gte), SecuriTeam, 15:21
[NEWS] Hotmail Cross Site Scripting Vulnerability (Malformed Tags), SecuriTeam, 15:11
[UNIX] SQL Injections in Ikonboard (st, keywords), SecuriTeam, 14:51
[NT] Multiple Vulnerabilities in WinAMP (MP4 and NSV files), SecuriTeam, 14:41
[NEWS] Yahoo! Mail Cross-Site Scripting Vulnerability, SecuriTeam, 14:30
[UNIX] singapore Image Gallery Web Application Multiple Vulnerabilities, SecuriTeam, 14:00
[UNIX] Multiple Vulnerabilities in Kayako eSupport, SecuriTeam, 13:50
[NEWS] MPlayer Multiple Remote Overflows (RTSP, MMST, BMP), SecuriTeam, 05:45
[NT] Crystal FTP Pro Client LIST Buffer Overflow, SecuriTeam, 05:34

December 19, 2004

[NT] Veritas Backup Exec Agent Browser Registration Request Buffer Overflow, SecuriTeam, 15:04
[EXPL] phpBB2 Information Leak due to Unserializer, SecuriTeam, 14:03

December 16, 2004

[UNIX] Samba smbd Security Descriptor Integer Overflow Vulnerability, SecuriTeam, 22:04
[NEWS] Roxio Toast Format String Vulnerability, SecuriTeam, 22:04
[NEWS] Content-Type Spoofing in Mozilla Firefox and Opera Allows Users to Bypass Security Restrictions, SecuriTeam, 22:04
[UNIX] Blog Torrent Arbitrary File Downloading, SecuriTeam, 22:04
[UNIX] Rssh and Scponly Arbitrary Command Execution, SecuriTeam, 22:04
[NT] Microsoft Windows XP Firewall Default Configuration Vulnerability (SP2, Local Subnet), SecuriTeam, 22:04
[NT] Insecure Default File System Permissions n Microsoft Versions of Kerio Software, SecuriTeam, 22:04
[UNIX] GNUBoard PHP Injection Vulnerability, SecuriTeam, 22:04
[UNIX] MoniWiki Arbitrary File Uploading, SecuriTeam, 22:04
[NT] Local Privileges Elevation via Symantec LiveUpdate, SecuriTeam, 22:04
[NT] Insecure Credential Storage on Kerio Software, SecuriTeam, 22:04
[UNIX] Multiple Vulnerabilities within PHP 4/5 (pack, unpack, safe_mode_exec_dir, safe_mode, realpath, unserialize), SecuriTeam, 22:04
[NEWS] Default Administrative Password in Cisco Guard and Traffic Anomaly Detector, SecuriTeam, 22:04
[EXPL] Ability FTP APPE Buffer Overflow, SecuriTeam, 22:04
[EXPL] Linux Kernel Multiple Local DoS (vc_resize, ip_options_get), SecuriTeam, 22:04
[REVS] Security Deficiencies of Automated Windows Installations, SecuriTeam, 22:04
[NT] Buffer Overflow in HyperTerminal's .ht Files (MS04-043), SecuriTeam, 22:04
[NT] Microsoft Word 6.0/95 Document Converter Buffer Overflow (MS04-041), SecuriTeam, 22:04
[UNIX] Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability, SecuriTeam, 22:04
[NEWS] Adobe Reader .ETD File Format String, SecuriTeam, 22:03
[NT] ASP-rider SQL Injection Vulnerability, SecuriTeam, 22:03
[NT] Computer Associates eTrust EZ Antivirus Insecure File Permission, SecuriTeam, 22:03
[EXPL] wget Directory Traversal (Exploit), SecuriTeam, 22:03
[UNIX] Linux Kernel scm_send Local DoS Vulnerability, SecuriTeam, 22:03
[NT] Vulnerabilities in Windows Kernel and LSASS Allows Elevation of Privilege (MS04-044), SecuriTeam, 22:03
[NT] Vulnerability in WINS Allows Remote Code Execution (MS04-045, Name Validation, Association Context), SecuriTeam, 22:03
[NT] Vulnerability in DHCP Allows Remote Code Execution and DoS (MS04-042, Logging, Request), SecuriTeam, 22:03
[NT] Vulnerability In HyperTerminal Allows Code Execution (MS04-043), SecuriTeam, 22:03
[UNIX] Multiple Remote Vulnerabilities in NFS-Utils (64bit, SIGPIPE), SecuriTeam, 22:03
[UNIX] Linux Kernel IGMP Vulnerabilities, SecuriTeam, 22:03
[UNIX] Adobe Reader mailListIsPdf() Buffer Overflow Vulnerability, SecuriTeam, 22:03
[NT] Vulnerability in WordPad Allow Code Execution (MS04-041), SecuriTeam, 22:03

December 02, 2004

[UNIX] Multiple Vulnerabilities in MaxDB WebTools, SecuriTeam, 10:13
[NEWS] Gamespy SDK Cd-Key Validation Toolkit Buffer Overflow, SecuriTeam, 10:13
[UNIX] Citadel/UX Remote Format String, SecuriTeam, 09:51
[UNIX] Tom's IPX Tunneling Daemon Config File Format String Vulnerability, SecuriTeam, 09:51
[NT] F-Secure Policy Manager Path Disclosure Vulnerability, SecuriTeam, 09:11
[UNIX] Local Off-By-One in Mtr, SecuriTeam, 09:01
[REVS] Multiple Collisions attack on MD5 and other Hashing Algorithms, SecuriTeam, 09:01
[NT] Remote Execute DoS Attack Leads to Client Crash, SecuriTeam, 09:01
[NT] Battlefield 1942 and Vietnam Broadcast Client Crash, SecuriTeam, 09:01
[NEWS] Mac OS X / Adobe Version Cue Local Root, SecuriTeam, 09:01
[NT] Multiple Vulnerabilities in w3who ISAPI DLL, SecuriTeam, 05:13
[TOOL] Absinthe - Blind SQL Injection Tool, SecuriTeam, 05:12
[TOOL] AIRT - Advanced Incident Response Tool, SecuriTeam, 04:02

December 01, 2004

[NT] Cumulative Security Update for Internet Explorer (889293, MS04-040), SecuriTeam, 22:23
[UNIX] AHG EZshopper loadpage.cgi Directory Traversal (.|./ Attack), SecuriTeam, 14:41
[EXPL] Aspell word-list-compress Command Line Stack Overflow, SecuriTeam, 14:01
[UNIX] Konqueror SMB Share Shortcuts Password Disclosure, SecuriTeam, 13:41
[UNIX] IPCop proxylog.dat Cross Site Scripting Vulnerability, SecuriTeam, 12:40
[TOOL] WeBrute - Directory Brute Forcer, SecuriTeam, 02:45
[NT] Orbz Buffer Overflow, SecuriTeam, 02:45