• USN-703-1.txt - Ubuntu Security Notice USN-703-1 - Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary commands with user privileges.
• USN-702-1.txt - Ubuntu Security Notice USN-702-1 - Gunter Hockel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares are enabled on the server by setting registry shares = yes , include = registry , or config backend = registry , which is not the default.
• phpauctionsystem-insecure.txt - PHP Auction System suffers from an insecure cookie handling vulnerability.
• phpauctionsystem-sqlxss.txt - PHP Auction System suffers from cross site scripting and remote SQL injection vulnerabilities.
• joomlaphoca-sql.txt - Joomla Phoca Documentation remote SQL injection exploit that makes use of index.php.
• lfi-rfi2.txt - Local / Remote file inclusion scanner that attempts to make use of a c99 shell on a vulnerable host.
• theratcms-sql.txt - The Rat CMS Alpha 2 remote blind SQL injection exploit that leverages viewarticle.php.
• walusoft-traversal.txt - Walusoft TFTPServer2000 version 3.6.1 suffers from a directory traversal vulnerability.
• dmp161lst4-overflow.txt - Destiny Media Player version 1.61 .lst file local buffer overflow proof of concept exploit that spawns calc.exe.
• seacureit-cfp2009.txt - SEaCURE.IT is the first international technical conference ever held in Italy on security related topics, aimed at bringing together the leading experts from all over the world, to create a unique setting for networking and discussion among the speakers and the attendees. The 2009 edition will be held from May 19th to the 22nd in Villasimius, Sardinia.
• plxautoreminder-sql.txt - plxAutoReminder version 3.7 suffers from a remote SQL injection vulnerability.
• safari-heap.txt - Safari array integer overflow proof of concept exploit.
• dmp161lst3-overflow.txt - Destiny Media Player version 1.61 .lst file local buffer overflow proof of concept exploit that spawns calc.exe.
• tor.uclibc.i686.20090105.iso - Tor-ramdisk is an i686 uClibc-based micro Linux distribution whose only purpose is to host a Tor server in an environment that maximizes security and privacy. Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. Security is enhanced by employing a monolithically compiled GRSEC/PAX patched kernel and hardened system tools. Privacy is enhanced by turning off logging at all levels so that even the Tor operator only has access to minimal information. Finally, since everything runs in ephemeral memory, no information survives a reboot, except for the Tor configuration file and the private RSA key which may be exported/imported by FTP.
• solucion-sql.txt - SolucionWeb suffers from a remote SQL injection vulnerability in main.php.
...