n.player buffer overflow
Published:		05.01.2010
Source:		BUGTRAQ
SecurityVulns ID:		10500
Type:		local
Level:		4/10
Description:		Buffer overflow on skin file parsing.

Original document

rewterz, REWTERZ-20100101 - n.player Local Heap Overflow Vulnerability (05.01.2010)

Discuss:

Read or add your comments to this news (0 comments)

httpdx Web server information disclosure
Published:		05.01.2010
Source:		BUGTRAQ
SecurityVulns ID:		10496
Type:		remote
Level:		5/10
Description:		It's possible to obtain script source by adding space symbol.

Affected:

HTTPDX : httpdx 1.5

Original document

info_(at)_securitylab.ir, httpdx webserver v1.5 Remote Source Disclosure (05.01.2010)

Discuss:

Read or add your comments to this news (0 comments)

PDF-XChange memor corruption
Published:		05.01.2010
Source:		BUGTRAQ
SecurityVulns ID:		10497
Type:		client
Level:		5/10
Description:		Memory corruption on PDF files parsing.

Affected:

PDFXCHANGE : PDF-XChange Viewer 2.0

Original document

SECUNIA, Secunia Research: PDF-XChange Viewer Content Parsing Memory Corruption Vulnerability (05.01.2010)

Discuss:

Read or add your comments to this news (0 comments)

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		05.01.2010
Source:
SecurityVulns ID:		10498
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		FREEWEBSHOP : FreeWebshop 2.2
		APROX : AproxEngine 5.3
		APROX : AproxEngine 6.0
		LINEWEB : LineWeb 1.0

Original document		ign.sec_(at)_gmail.com, Multiple vulnerabilities in LineWeb 1.0.5 (05.01.2010)
		Akita Software Security, FreeWebshop.org: multiple vulnerabilities (05.01.2010)
		MustLive, Vulnerabilities in Athree CMS (05.01.2010)
		SECUNIA, Secunia Research: AproxEngine Multiple Vulnerabilities (05.01.2010)

Discuss:

Read or add your comments to this news (0 comments)

Facebook for iPhone multiple security vulnerabilities updated since 05.01.2010
Published:		16.02.2010
Source:		INJ3CT0R.COM
SecurityVulns ID:		10499
Type:		client
Level:		5/10
Description:		Crosste scripting via notes page, session hijacking.

Affected:

APPLE : Facebook App 3.1

Original document		bill.robson_(at)_e-sentinel.com, e-Sentinel Security Advisory - Ref: Session Hijacking iPhone Facebook Application ver 3.1.2 (16.02.2010)
		Inj3ct0r.com, Facebook for iPhone persistent XSS (05.01.2010)

Discuss:

Read or add your comments to this news (0 comments)