SecurityReason - World Laboratory of Bugtraq

	SecurityReason
News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

	WLB
WLB Database

Send to WLB

About WLB

	RSS
News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

	Corporate
Contact

About us

	Services
SecurePHP


	Note
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive : exploit()securityreason()com

Selected Category : World Laboratory of Bugtraq

03 04 05 06 07 08 09 10 11

18.10.2008 -	Absolute Poll Manager XE 4.1 (xlacomments.asp) SQL Injection Vuln
18.10.2008 -	MS OWA 2003 Redirection Vulnerability
18.10.2008 -	Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) LFI
17.10.2008 -	WEB//NEWS SQL Injection and Cookie Manipulation
17.10.2008 -	AFD.sys kernel memory overwrite.
17.10.2008 -	Remote command execution in Instant Expert Analysis
16.10.2008 -	IE6 remote memory disclosure and remote code execution
16.10.2008 -	Vivid Ads Shopping Cart (cid) Remote SQL Injection
16.10.2008 -	Multiple Flash Authoring Heap Overflows - Malformed SWF Files
16.10.2008 -	OpenVAS 2.0 Begins Public Beta Phase
15.10.2008 -	Webscene eCommerce (level) Remote Sql Injection
15.10.2008 -	WP Comment Remix 1.4.3 Multiple Vulnerabilities
15.10.2008 -	VLC media player XSPF Memory Corruption
12.10.2008 -	CA ARCserve Backup DB Engine Denial of Service
12.10.2008 -	CA ARCserve Backup Tape Engine Denial of Service
11.10.2008 -	PersianTools Photo Gallery / Remote File upload Vulnerability
11.10.2008 -	CCMS 3.1 (skin) Multiple Local File Inclusion Vulnerabilities
11.10.2008 -	DPSnet Case Progress SQL Injection, XSS, Username Enumeration
11.10.2008 -	CA ARCserve Backup Multiple Vulnerabilities
09.10.2008 -	Windows Mobile 6 insecure password handling and too short WLAN-password
09.10.2008 -	PC Tools Spyware Doctor v6.0 flaw
09.10.2008 -	Graphviz Buffer Overflow Code Execution
09.10.2008 -	Cisco Unity in Authentication Bypass
08.10.2008 -	Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
08.10.2008 -	HostAdmin 3.* Remote File Include Vulnerabilities
08.10.2008 -	Yerba SACphp <= 6.3 / Local File Inclusion Exploit
07.10.2008 -	Internet Explorer 7 Resource Consumption on Vista
07.10.2008 -	OpenNMS Multiple Vulnerabilities
07.10.2008 -	BBlog 0.7.6 SQL Injection Vuln
07.10.2008 -	Blue Coat K9 Web Protection V4.0.230 Beta Vulnerability

	Alert
Microsoft VISTA TCP/IP stack buffer overflow - 2008-11-27 Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory.


	Apache
» Apache Tomcat information disclosure

» Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability

» Apache Tomcat information disclosure vulnerability

» Apache Tomcat XSS vulnerability



	PHP
» PHP 5.2.6 SAPI php_getuid() overload

» PHP ZipArchive::extractTo() Directory Traversal Vulnerability

» PHP 5.2.6 dba_replace() destroying file

» PHP 5.2.6 (error_log) safe_mode bypass