SecurityReason - World Laboratory of Bugtraq

	SecurityReason
News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

	WLB
WLB Database

Send to WLB

About WLB

	RSS
News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

	Corporate
Contact

About us

	Services
SecurePHP


	Note
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive : exploit()securityreason()com

Selected Category : World Laboratory of Bugtraq

04 05 06 07 08 09 10 11 12

06.10.2008 -	XAMPP 'cds.php' SQL Injection vulnerability
05.10.2008 -	VeriSign Kontiki Delivery Management System (DMS) Cross-Site Scripting Vulnerability
05.10.2008 -	Adobe Flash Player plug-in null pointer dereference and browser crash
05.10.2008 -	phpMyID XSS vulnerability
03.10.2008 -	XAMPP 'adodb.php' cross-site scripting vulnerability
03.10.2008 -	Juniper Netscreen Firewall Cross-Site-Scripting (XSS) event log injection
03.10.2008 -	HostAdmin Cross-Site Scripting Vulnerabilities
03.10.2008 -	phpMyID can act as a redirector and as headers injector
02.10.2008 -	Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit
02.10.2008 -	eFront <= 3.5.1 / build 2710: Remote File Inclusion Vulnerability
02.10.2008 -	Remote and Local File Inclusion Vulnerability <= 1.1 Rportal
02.10.2008 -	WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability
01.10.2008 -	MySQL command-line client HTML injection vulnerability
01.10.2008 -	Google Chrome Window Object Suppressing Remote Denial of Service.
01.10.2008 -	WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability
01.10.2008 -	PHP Calendar Script Remote XSS (Permanent) Vulnerabilities
01.10.2008 -	ParsaWeb CMS SQL Injection
01.10.2008 -	Verizon FIOS (and DSL?) wireless access point insecure default WEP key
29.09.2008 -	shoutbox Remote Password Disclouse Vulnerability
28.09.2008 -	Linksys/Cisco WRT350N 1.0.3.7 Insecure Samba Static Configuration
28.09.2008 -	hyBook Remote Password Disclouse Vulnerability
28.09.2008 -	csphonebook 1.02 Remote XSS Vulnerabilitiy
27.09.2008 -	RPG.Board <= 0.0.8Beta2 Remote SQL Injection
27.09.2008 -	The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability
27.09.2008 -	Crux Gallery <= 1.32 / Insecure Cookie Handling Vulnerability
27.09.2008 -	DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit
26.09.2008 -	multiple vendor ftpd - Cross-site request forgery
26.09.2008 -	CA Service Desk Multiple Cross-Site Scripting Vulnerabilities
26.09.2008 -	Google Docs (HTML code) Multiple Cross Site Scripting Vulnerabilities
26.09.2008 -	php create_function commond injection vulnerability

	Alert
Microsoft VISTA TCP/IP stack buffer overflow - 2008-11-27 Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory.


	Apache
» Apache Tomcat information disclosure

» Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability

» Apache Tomcat information disclosure vulnerability

» Apache Tomcat XSS vulnerability



	PHP
» PHP 5.2.6 SAPI php_getuid() overload

» PHP ZipArchive::extractTo() Directory Traversal Vulnerability

» PHP 5.2.6 dba_replace() destroying file

» PHP 5.2.6 (error_log) safe_mode bypass