SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier

 ( 127 days 17 hours ago)

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier # Discovered by: Charles Vaughn (cvaughnatgmail.com) # Software: # Status: Vendor Notified, updated version available # Vulnerability TorrentTrader is a popular torrent tracker platform written in PHP. ...

Re: VisualSentinel 0.7 Cross Agent Scripting Vulnerability

 ( 127 days 17 hours ago)

Why the strtolower after htmlentities?

LokiCMS Multiple Vulnerabilities through Authorization weakness

 ( 127 days 22 hours ago)

# Title: LokiCMS Multiple Vulnerabilities through Authorization weakness # Vendor: # Bugs: Arbitrary File Overwrite,Code Injection,File Inclusion,Retrieve Admin's Hash # Vulnerable Version: LokiCMS 0.3.4 (prior versions also may be affected) # Exploitation: Remote with browser # Impact: Very High # Fix: N/A - Description: ...

VisualSentinel 0.7 Cross Agent Scripting Vulnerability

 ( 127 days 22 hours ago)

VisualSentinel 0.7 Cross Agent Scripting # Discovered by: Alfredo Panzera, Opencosmo Security # Software vendor: # Date: 31-05-2008 # Vulnerability: The vulnerability consists on inject javascript code falsify the user agent's attacker during an attack and then save in the log the user agent falsified. ...

[SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities

 ( 127 days 22 hours ago)

- Debian Security Advisory DSA-1588-2 securityatdebian.org dann frazier May 30, 2008 - Package : linux-2.6 Vulnerability : denial of service Problem type : local/remote Debian-specific: no CVE Id(s) : CVE-2007-6712 CVE-2008-1615 CVE-2008-2136 CVE-2008-2137 Several vulnerabilities have been discovered in the Linux kernel that may ...