SECUNIA ADVISORY ID: SA34145

VERIFY ADVISORY: http://secunia.com/advisories/34145/

CRITICAL: Highly Critical

DESCRIPTION: Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to conduct spoofing attacks, bypass certain security restrictions, disclose sensitive information, or compromise a user's system. The vulnerabilities are reported in versions prior to 3.0.7.
 Read More...

SECUNIA ADVISORY ID: SA33981

VERIFY ADVISORY: http://secunia.com/advisories/33981/

CRITICAL: Highly critical

DESCRIPTION: Secunia Research has discovered a vulnerability in Winamp, which can be exploited by malicious people to compromise a user's system. The vulnerability is confirmed in versions 5.541 and 5.55. Other versions may also be affected.
 Read More...

SECUNIA ADVISORY ID: SA34081

VERIFY ADVISORY: http://secunia.com/advisories/34081/

DESCRIPTION: Some vulnerabilities have been reported in PHP, where some have an unknown impact an others can potentially be exploited by malicious people to disclose sensitive information or cause a DoS (Denial of Service).
 Read More...

SECUNIA ADVISORY ID: SA34076

VERIFY ADVISORY: http://secunia.com/advisories/34076/

DESCRIPTION: A vulnerability has been discovered in Coppermine Photo Gallery, which can be exploited by malicious people to conduct cross-site request forgery attacks. This vulnerability is confirmed in version 1.4.20. Other versions may also be affected.
 Read More...

SECUNIA ADVISORY ID: SA33988

VERIFY ADVISORY: http://secunia.com/advisories/33988/

DESCRIPTION: mckt has discovered some vulnerabilities in Zen Cart, which can be exploited by malicious people to conduct cross-site request forgery attacks. These vulnerabilities are confirmed in version 1.3.8. Other versions may also be affected.
 Read More...

SECUNIA ADVISORY ID: SA33990

VERIFY ADVISORY: http://secunia.com/advisories/33990/

DESCRIPTION: mckt has reported some vulnerabilities in cPanel, which can be exploited by malicious, local users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. Successful exploitation of these cross-site request forgery vulnerabilities requires that the "XSRF protection" within the WHM's Tweak Settings under the Security section is disabled.
 Read More...