SecurityReason - SecurityAlert Database

	SecurityReason
News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

	WLB
WLB Database

Send to WLB

About WLB

	RSS
News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

	Corporate
Contact

About us

	Services
SecurePHP


	Note
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive : exploit()securityreason()com

Selected Category : SecurityAlert Database

05 06 07 08 09 10 11 12 13

12.03.2008 -	Multiple vulnerabilities in Google's Android SDK
11.03.2008 -	Horde Webmail file inclusion proof of concept & patch.
11.03.2008 -	XSS in Neptune Web Server
11.03.2008 -	Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13
10.03.2008 -	Directory traversal in MicroWorld eScan Server 9.0.742.98
10.03.2008 -	PHP-Nuke KutubiSitte "kid" SQL Injection
09.03.2008 -	IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter)
06.03.2008 -	XSS on Juniper Networks Secure Access 2000
06.03.2008 -	Webroot disclosure on Juniper Networks Secure Access 2000
06.03.2008 -	PHP-Nuke block-Forums.php subject vulnerabilities
06.03.2008 -	Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb
06.03.2008 -	123 Flash Chat Module for phpBB
06.03.2008 -	Centreon <= 1.4.2.3 (index.php) Remote File Disclosure
06.03.2008 -	kcwiki 1.0 multiple remote file inclusion vulnerabilities.
06.03.2008 -	Cross-site Scripting and CSRF in TorrentTrader Classic v1.08
06.03.2008 -	Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script
04.03.2008 -	Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials
04.03.2008 -	SynCE Remote Command Injection
04.03.2008 -	XSS on XRMS- open source CRM
04.03.2008 -	PHPMyTourney Remote file include Vulnerability
29.02.2008 -	Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385)
28.02.2008 -	Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities
27.02.2008 -	Format string and buffer-overflow in SurgeMail 38k4
27.02.2008 -	NULL pointer in SurgeFTP 2.3a2
27.02.2008 -	Softbiz jokes and funny pictures (index.php) sql injection
27.02.2008 -	Alkacon OpenCms tree_files.jsp resource XSS
27.02.2008 -	Packeteer Products File Listing XSS
26.02.2008 -	Path Traversal vulnerability in VMware's shared folders implementation
26.02.2008 -	Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP)
26.02.2008 -	Multiple vulnerabilities in Double-Take 5.0.0.2865

	Alert
BSD libc (strfmon) Multiple vulnerabilities - 2008-03-25 Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected BSD systems.


	Apache
» Apache-SSL memory disclosure

» Apache mod_negotiation Xss and Http Response Splitting

» Apache (mod_status) Refresh Header - Open Redirector (XSS)

» Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability



	PHP
» PHP 5.2.6 chdir(),ftok() (standard ext) safe_mode bypass

» PHP 5.2.6 posix_access() (posix ext) safe_mode bypass

» PHP 5.2.5 and prior : *printf() functions Integer Overflow

» PHP 5.2.5 cURL safe_mode bypass