Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox New vulnerability? New tool? Tell us	Unix Focus PHP gd Library imageRotate() Function Information Leak Vulnerability 31 Dec. 2008   An implementation error in PHP's gd library can cause information leakage from the memory of the PHP (or possible the web server) process More ›››   Roundcubemail PHP Arbitrary Code Injection 24 Dec. 2008   A vulnerability in Roundcubemail's html2text script allows unauthenticated remote attackers to execute arbitrary PHP code More ›››   PHP mbstring Buffer Overflow Vulnerability 21 Dec. 2008   A heap buffer overflow was found in mbstring extension that is bundled in the standard distribution. mbstring extension provides a set of functions for the manipulation of multibyte / Unicode strings More ›››   Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL Pointer Dereference 21 Dec. 2008   The kernel of Solaris contains a vulnerability in the code that handles SIOCGTUNPARAM IOCTL requests More ›››   PHP APC Vulnerable to Local Attacks 21 Dec. 2008   A cross site scripting issue which comes into play when you have local users which are able to create files and cause those to be cached by the PHP APC, and a server admin later visits the apc.php web interface which comes with PHP APC More ›››   Vinagre show_error() Format String Vulnerability 14 Dec. 2008   Vinagre is a VNC client for the GNOME Desktop. A format string error has been found on the 'vinagre_utils_show_error()' function that can be exploited via commands issued from a malicious server containing format string specifiers on the VNC name More ›››   Multiple listen()s on Same Socket Corrupts the Linux Vcc Table 7 Dec. 2008   A vulnerability in the Linux kernel allows local attackers to cause the kernel to corrupt the VCC table which will cause the kernel to panic More ›››   PHP SAPI php_getuid() Overload 7 Dec. 2008   A vulnerability in php_getuid() allows attackers to bypass the security mechanism of PHP due to the fact that page_uid and page_gid are not properly set when PHP is launched as SAPI More ›››   PHP dba_replace() Arbitrary File Destruction 30 Nov. 2008   PHP's dba_replace is a function that allows replacing or insertion of entries, a vulnerability in the function allows attackers to cause the function to destroy arbitrary files More ›››   VLC Media Player RealText Processing Stack Overflow Vulnerability 9 Nov. 2008   The VLC media player contains a stack overflow vulnerability while parsing malformed RealText (rt) subtitle files. The vulnerability can be trivially exploited by a (remote) attacker to execute arbitrary code in the context of VLC media player More ›››     Unix Focus Archive ...  Security News -  Security Reviews -  Exploits -  Tools -  UNIX Focus -  Windows Focus	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Recent Articles PHP gd Library imageRotate() Function Information Leak Vulnerability Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability Citrix Broadcast Server login.asp SQL Injection FSpy - Linux Filesystem Activity Monitoring telnetrecon - Telnet Recon Zerowine Sandbox Microsoft Internet Explorer XML Buffer Overflow (Exploit) Roundcubemail PHP Arbitrary Code Injection Trend Micro HouseCall ActiveX Control Arbitrary Code Execution Qemu and KVM VNC Server Remote DoS  Featured Articles Roundcubemail PHP Arbitrary Code Injection Qemu and KVM VNC Server Remote DoS Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL Pointer Dereference Firefox Cross-Domain Text Theft Microsoft Word Malformed FIB Arbitrary Free Vulnerability (MS08-072) Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities Hacking SOHO Routers

Copyright © 1998-2008 Beyond Security All rights reserved.
Terms of Use Site Privacy Statement.